Lucene search

MitreCVE-2003-0615

HistoryAug 27, 2003 - 4:00 a.m.

CVE-2003-0615

2003-08-2704:00:00

mitre

web.nvd.nist.gov

cve-2003-0615

cross-site scripting

xss

cgi.pm

web script

url

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.011

Percentile

84.5%

JSON

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form’s action parameter.

Affected configurations

Nvd

Node

cgi.pmcgi.pmMatch2.73

cgi.pmcgi.pmMatch2.74

cgi.pmcgi.pmMatch2.75

cgi.pmcgi.pmMatch2.76

cgi.pmcgi.pmMatch2.78

cgi.pmcgi.pmMatch2.79

cgi.pmcgi.pmMatch2.93

cgi.pmcgi.pmMatch2.751

cgi.pmcgi.pmMatch2.753

openpkgopenpkgMatch1.2

openpkgopenpkgMatch1.3

openpkgopenpkgMatchcurrent

Node

debiandebian_linuxMatch3.0alpha

debiandebian_linuxMatch3.0arm

debiandebian_linuxMatch3.0hppa

debiandebian_linuxMatch3.0ia-32

debiandebian_linuxMatch3.0ia-64

debiandebian_linuxMatch3.0m68k

debiandebian_linuxMatch3.0mips

debiandebian_linuxMatch3.0mipsel

debiandebian_linuxMatch3.0ppc

debiandebian_linuxMatch3.0s-390

debiandebian_linuxMatch3.0sparc

VendorProductVersionCPE
cgi.pmcgi.pm2.73cpe:2.3:a:cgi.pm:cgi.pm:2.73:*:*:*:*:*:*:*
cgi.pmcgi.pm2.74cpe:2.3:a:cgi.pm:cgi.pm:2.74:*:*:*:*:*:*:*
cgi.pmcgi.pm2.75cpe:2.3:a:cgi.pm:cgi.pm:2.75:*:*:*:*:*:*:*
cgi.pmcgi.pm2.76cpe:2.3:a:cgi.pm:cgi.pm:2.76:*:*:*:*:*:*:*
cgi.pmcgi.pm2.78cpe:2.3:a:cgi.pm:cgi.pm:2.78:*:*:*:*:*:*:*
cgi.pmcgi.pm2.79cpe:2.3:a:cgi.pm:cgi.pm:2.79:*:*:*:*:*:*:*
cgi.pmcgi.pm2.93cpe:2.3:a:cgi.pm:cgi.pm:2.93:*:*:*:*:*:*:*
cgi.pmcgi.pm2.751cpe:2.3:a:cgi.pm:cgi.pm:2.751:*:*:*:*:*:*:*
cgi.pmcgi.pm2.753cpe:2.3:a:cgi.pm:cgi.pm:2.753:*:*:*:*:*:*:*
openpkgopenpkg1.2cpe:2.3:a:openpkg:openpkg:1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cgi.pm	cgi.pm	2.73	cpe:2.3:a:cgi.pm:cgi.pm:2.73:::::::*
cgi.pm	cgi.pm	2.74	cpe:2.3:a:cgi.pm:cgi.pm:2.74:::::::*
cgi.pm	cgi.pm	2.75	cpe:2.3:a:cgi.pm:cgi.pm:2.75:::::::*
cgi.pm	cgi.pm	2.76	cpe:2.3:a:cgi.pm:cgi.pm:2.76:::::::*
cgi.pm	cgi.pm	2.78	cpe:2.3:a:cgi.pm:cgi.pm:2.78:::::::*
cgi.pm	cgi.pm	2.79	cpe:2.3:a:cgi.pm:cgi.pm:2.79:::::::*
cgi.pm	cgi.pm	2.93	cpe:2.3:a:cgi.pm:cgi.pm:2.93:::::::*
cgi.pm	cgi.pm	2.751	cpe:2.3:a:cgi.pm:cgi.pm:2.751:::::::*
cgi.pm	cgi.pm	2.753	cpe:2.3:a:cgi.pm:cgi.pm:2.753:::::::*
openpkg	openpkg	1.2	cpe:2.3:a:openpkg:openpkg:1.2:::::::*