CVE-2003-0154

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or…

published March 26, 2003

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04593 · 91.6th percentile
Published
2003-03-26T05:00Z
EPSS history
Timeline
  • 26 MAR 05:00Z
    Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or…
    cvelistv5