CVE-2003-0615
published 2003-08-27CVE-2003-0615: Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
4.44%
90.3th percentile
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| cgi.pm | cgi.pm | — | — |
| debian | debian_linux | — | — |
| debian | perl | < perl 5.8.0-19 (bookworm) | perl 5.8.0-19 (bookworm) |
| openpkg | openpkg | — | — |
| openpkg | openpkg | — | — |
| openpkg | openpkg | — | — |
| perl | perl | >= 0 < 5.8.0-19 | 5.8.0-19 |
| perl | perl | >= 0 < 5.8.0-19 | 5.8.0-19 |
| perl | perl | >= 0 < 5.8.0-19 | 5.8.0-19 |
| perl | perl | >= 0 < 5.8.0-19 | 5.8.0-19 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2003-07-20·CVSS 4.3
CVE-2003-0615 [MEDIUM] security flaw
security flaw
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
Debian
CVE-2003-0615: perl - Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote...
vendor_debian·2003·CVSS 4.3
CVE-2003-0615 [MEDIUM] CVE-2003-0615: perl - Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote...
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
Scope: local
bookworm: resolved (fixed in 5.8.0-19)
bullseye: resolved (fixed in 5.8.0-19)
forky: resolved (fixed in 5.8.0-19)
sid: resolved (fixed in 5.8.0-19)
trixie: resolved (fixed in 5.8.0-19)
GHSA
GHSA-8j4w-mr68-r956: Cross-site scripting (XSS) vulnerability in start_form() of CGI
ghsa_unreviewed·2022-04-29
CVE-2003-0615 [MEDIUM] GHSA-8j4w-mr68-r956: Cross-site scripting (XSS) vulnerability in start_form() of CGI
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
OSV
CVE-2003-0615: Cross-site scripting (XSS) vulnerability in start_form() of CGI
osv·2003-08-27·CVSS 4.3
CVE-2003-0615 [MEDIUM] CVE-2003-0615: Cross-site scripting (XSS) vulnerability in start_form() of CGI
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713http://marc.info/?l=bugtraq&m=105880349328877&w=2http://marc.info/?l=bugtraq&m=106018783704468&w=2http://marc.info/?l=full-disclosure&m=105875211018698&w=2http://secunia.com/advisories/13638http://securitytracker.com/id?1007234http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1http://www.ciac.org/ciac/bulletins/n-155.shtmlhttp://www.debian.org/security/2003/dsa-371http://www.kb.cert.org/vuls/id/246409http://www.redhat.com/support/errata/RHSA-2003-256.htmlhttp://www.securityfocus.com/bid/8231http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084https://exchange.xforce.ibmcloud.com/vulnerabilities/12669https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713http://marc.info/?l=bugtraq&m=105880349328877&w=2http://marc.info/?l=bugtraq&m=106018783704468&w=2http://marc.info/?l=full-disclosure&m=105875211018698&w=2http://secunia.com/advisories/13638http://securitytracker.com/id?1007234http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1http://www.ciac.org/ciac/bulletins/n-155.shtmlhttp://www.debian.org/security/2003/dsa-371http://www.kb.cert.org/vuls/id/246409http://www.redhat.com/support/errata/RHSA-2003-256.htmlhttp://www.securityfocus.com/bid/8231http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084https://exchange.xforce.ibmcloud.com/vulnerabilities/12669https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470
2003-08-27
Published