QwikSec

Security Database

CVE

CWE

Training

CVE-2003-0154

Published: Mar 26, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://bugzilla.mozilla.org/attachment.cgi?id=95985&action=view

x_refsource_CONFIRM

http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

bonsai-error-message-xss(9920)

vdb-entry

x_refsource_XF

20020819 Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

http://bugzilla.mozilla.org/show_bug.cgi?id=163573

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

http://bugzilla.mozilla.org/show_bug.cgi?id=146244

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.