Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL which is echoed in a popup window that displays a parsing error message a different vulnerability than CVE-2004-1229.