cbcvebase.
CVE-2003-0405
published 2003-06-30

CVE-2003-0405: Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS…

PriorityP426medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.57%
72.4th percentile
Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is processed in the VALID_PATHS command.

Affected

7 ranges
VendorProductVersion rangeFixed in
vignettecontent_suite——
vignettecontent_suite——
vignettecontent_suite——
vignettecontent_suite——
vignettecontent_suite——
vignettestoryserver——
vignettevignette——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.