CVEvulnerability

CVE-2003-0615

4.3 MEDIUM Published 2003-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

Affected configurations

• cgi.pm cgi.pm 2.73 • cgi.pm cgi.pm 2.74 • cgi.pm cgi.pm 2.75 • cgi.pm cgi.pm 2.76 • cgi.pm cgi.pm 2.78 • cgi.pm cgi.pm 2.79 • cgi.pm cgi.pm 2.93 • cgi.pm cgi.pm 2.751 • cgi.pm cgi.pm 2.753 • openpkg openpkg 1.2 • openpkg openpkg 1.3 • openpkg openpkg current • debian debian linux 3.0

References