CVE-2003-0154

CVE Database · CVE-2003-0154

CVE-2003-0154

· N/AModified

CVSS v3.1

N/A

EPSS

4.59%

Published

Apr 2, 2003

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBMozilla Bonsai - Multiple Cross-Site Scripting Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.

Affected Products (1)

mozilla · bonsaivulnerable

References (16)

http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view

http://bugzilla.mozilla.org/attachment.cgi?id=95985&action=view

http://bugzilla.mozilla.org/show_bug.cgi?id=146244

http://bugzilla.mozilla.org/show_bug.cgi?id=163573

http://marc.info/?l=bugtraq&m=102980129101054&w=2

http://www.debian.org/security/2003/dsa-265

PatchVendor Advisory

http://www.iss.net/security_center/static/9920.php

http://www.securityfocus.com/bid/5516

ExploitPatchVendor Advisory

http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view

KEV Catalog EPSS Scores Vendors All CVEs