Unrated severityNVD Advisory· Published Apr 2, 2003· Updated Apr 16, 2026
CVE-2003-0154
CVE-2003-0154
Description
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
Affected products
1- cpe:2.3:a:mozilla:bonsai:1.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.debian.org/security/2003/dsa-265nvdPatchVendor Advisory
- www.securityfocus.com/bid/5516nvdExploitPatchVendor Advisory
- bugzilla.mozilla.org/attachment.cginvd
- bugzilla.mozilla.org/attachment.cginvd
- bugzilla.mozilla.org/show_bug.cginvd
- bugzilla.mozilla.org/show_bug.cginvd
- marc.infonvd
- www.iss.net/security_center/static/9920.phpnvd
News mentions
0No linked articles in our index yet.