VDB
CVE-2003-0615
CVE-2003-0615
PUBLISHED
Reported by mitre · Published August 1, 2003
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
| cgi.pm | cgi.pm |
Timeline
- Aug 1, 2003 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- 20030720 CGI.pm vulnerable to Cross-site Scripting. mailing-listx_refsource_FULLDISC
- MDKSA-2003:084 vendor-advisoryx_refsource_MANDRAKE
- DSA-371 vendor-advisoryx_refsource_DEBIAN
- 20030720 CGI.pm vulnerable to Cross-site Scripting mailing-listx_refsource_BUGTRAQ
- CLA-2003:713 vendor-advisoryx_refsource_CONECTIVA
- N-155 third-party-advisorygovernment-resourcex_refsource_CIAC
- cgi-startform-xss(12669) vdb-entryx_refsource_XF
- 20030806 [OpenPKG-SA-2003.036] OpenPKG Security Advisory (perl-www) mailing-listx_refsource_BUGTRAQ
- 1007234 vdb-entryx_refsource_SECTRACK
- RHSA-2003:256 vendor-advisoryx_refsource_REDHAT
- 101426 vendor-advisoryx_refsource_SUNALERT
- 13638 third-party-advisoryx_refsource_SECUNIA
- oval:org.mitre.oval:def:470 vdb-entrysignaturex_refsource_OVAL
- oval:org.mitre.oval:def:307 vdb-entrysignaturex_refsource_OVAL
- 8231 vdb-entryx_refsource_BID
- VU#246409 third-party-advisoryx_refsource_CERT-VN