CVE

Id
6983  
CVE No.
CVE-2003-0154  
Status
Candidate  
Description
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.  
Phase
Assigned (20030319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40645 6983 CVE-2003-0154 BUGTRAQ:20020819 Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities  View
40646 6983 CVE-2003-0154 URL:http://marc.info/?l=bugtraq&m=102980129101054&w=2  View
40647 6983 CVE-2003-0154 DEBIAN:DSA-265  View
40648 6983 CVE-2003-0154 URL:http://www.debian.org/security/2003/dsa-265  View
40649 6983 CVE-2003-0154 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=163573  View
40650 6983 CVE-2003-0154 CONFIRM:http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view  View
40651 6983 CVE-2003-0154 CONFIRM:http://bugzilla.mozilla.org/attachment.cgi?id=95985&action=view  View
40652 6983 CVE-2003-0154 MISC:http://bugzilla.mozilla.org/show_bug.cgi?id=146244  View
40653 6983 CVE-2003-0154 BID:5516  View
40654 6983 CVE-2003-0154 URL:http://www.securityfocus.com/bid/5516  View
40655 6983 CVE-2003-0154 XF:bonsai-error-message-xss(9920)  View

Related JVN