Unrated severityNVD Advisory· Published Apr 2, 2003· Updated Jun 16, 2026
CVE-2003-0154
CVE-2003-0154
Description
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:mozilla:bonsai:1.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:bonsai:1.3:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
8- www.debian.org/security/2003/dsa-265nvdPatchVendor Advisory
- www.securityfocus.com/bid/5516nvdExploitPatchVendor Advisory
- bugzilla.mozilla.org/attachment.cginvd
- bugzilla.mozilla.org/attachment.cginvd
- bugzilla.mozilla.org/show_bug.cginvd
- bugzilla.mozilla.org/show_bug.cginvd
- marc.infonvd
- www.iss.net/security_center/static/9920.phpnvd
News mentions
0No linked articles in our index yet.