4.3

CVE-2003-0615

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

Data is provided by the National Vulnerability Database (NVD)
Cgi.Pm ≫ Cgi.Pm Version2.73
Cgi.Pm ≫ Cgi.Pm Version2.74
Cgi.Pm ≫ Cgi.Pm Version2.75
Cgi.Pm ≫ Cgi.Pm Version2.76
Cgi.Pm ≫ Cgi.Pm Version2.78
Cgi.Pm ≫ Cgi.Pm Version2.79
Cgi.Pm ≫ Cgi.Pm Version2.93
Cgi.Pm ≫ Cgi.Pm Version2.751
Cgi.Pm ≫ Cgi.Pm Version2.753
Openpkg ≫ Openpkg Version1.2
Openpkg ≫ Openpkg Version1.3
Openpkg ≫ Openpkg Versioncurrent
Debian ≫ Debian Linux Version3.0 Editionalpha
Debian ≫ Debian Linux Version3.0 Editionarm
Debian ≫ Debian Linux Version3.0 Editionhppa
Debian ≫ Debian Linux Version3.0 Editionia-32
Debian ≫ Debian Linux Version3.0 Editionia-64
Debian ≫ Debian Linux Version3.0 Editionm68k
Debian ≫ Debian Linux Version3.0 Editionmips
Debian ≫ Debian Linux Version3.0 Editionmipsel
Debian ≫ Debian Linux Version3.0 Editionppc
Debian ≫ Debian Linux Version3.0 Editions-390
Debian ≫ Debian Linux Version3.0 Editionsparc
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 7.25% 0.908
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N