Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5
CVE-2003-0152
- EPSS 0.9%
- Published 02.04.2003 05:00:00
- Last modified 03.04.2025 01:03:51
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
- EPSS 5.57%
- Published 02.04.2003 05:00:00
- Last modified 03.04.2025 01:03:51
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
6.8
CVE-2003-0154
- EPSS 13.33%
- Published 02.04.2003 05:00:00
- Last modified 03.04.2025 01:03:51
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various p...
- EPSS 0.58%
- Published 02.04.2003 05:00:00
- Last modified 03.04.2025 01:03:51
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
1