CVE-2004-2522

Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject arbitrary web script or HTML via the (1) template or (2) language parameter.

• http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txtVendor Advisory
• http://secunia.com/advisories/12071Exploit, Vendor Advisory
• http://securitytracker.com/id?1010703Exploit
• http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0
• http://www.osvdb.org/7927Exploit
• http://www.securityfocus.com/bid/10731Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16701
• http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txtVendor Advisory
• http://secunia.com/advisories/12071Exploit, Vendor Advisory
• http://securitytracker.com/id?1010703Exploit
• http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0
• http://www.osvdb.org/7927Exploit
• http://www.securityfocus.com/bid/10731Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16701

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2516Directory traversal vulnerability in myServer 0.7 allows rem…
• CVE-2004-2517myServer 0.7.1 allows remote attackers to cause a denial of …
• CVE-2004-2518Gattaca Server 2003 1.1.10.0 allows remote attackers to obta…
• CVE-2004-2519Gattaca Server 2003 1.1.10.0 allows remote attackers to caus…
• CVE-2004-2520POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote …
• CVE-2004-2521Mail server in Gattaca Server 2003 1.1.10.0 allows remote at…
• CVE-2004-2523Format string vulnerability in the msg command (cat_message …
• CVE-2004-2524clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and ear…
• CVE-2004-2525Cross-site scripting (XSS) vulnerability in compat.php in Se…
• CVE-2004-2526Directory traversal vulnerability in ldacgi.exe in IBM Tivol…
• CVE-2004-2527The local and remote desktop login screens in Microsoft Wind…
• CVE-2004-2528Cross-site scripting (XSS) vulnerability in sresult.exe in W…