CVE-2003-0615

Опубликовано: 27 авг. 2003

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cgi.pm:cgi.pm:2.73:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.74:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.75:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.76:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.78:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.79:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.93:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.751:*:*:*:*:*:*:*

cpe:2.3:a:cgi.pm:cgi.pm:2.753:*:*:*:*:*:*:*

cpe:2.3:a:openpkg:openpkg:1.2:*:*:*:*:*:*:*

cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*

cpe:2.3:a:openpkg:openpkg:current:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*

EPSS

Процентиль: 91%

0.07248

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2003-0615

redhat

около 22 лет назад

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

CVE-2003-0615

debian

почти 22 года назад

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm all ...

GHSA-8j4w-mr68-r956

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

EPSS

Процентиль: 91%

0.07248

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other