← Back

Gossamer Threads

gossamer_threads

2 CVEs • 3 products

Products (3)

Click to collapse
Toggle

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gossamer Threads
2Gossamer Threads Links
Gossamer Threads Links Sql
Apr 16, 2026
May 11, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
1Gossamer Threads
1Dbman
Apr 16, 2026
May 5, 2000
N/A· v4
N/A· v3
6.4 MEDIUM· v2
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.