CVE-2003-0615: XSS

Published Aug 1, 2003

Updated

Cross-site scripting (XSS) vulnerability in startform() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

Affected Software

23 affected components

CGI.pm CGI.pm=2.751

Openpkg Openpkg=1.3

CGI.pm CGI.pm=2.79

CGI.pm CGI.pm=2.93

Openpkg Openpkg=current

CGI.pm CGI.pm=2.76

CGI.pm CGI.pm=2.75

CGI.pm CGI.pm=2.753

Openpkg Openpkg=1.2

CGI.pm CGI.pm=2.73

CGI.pm CGI.pm=2.74

CGI.pm CGI.pm=2.78

Debian Debian Linux=3.0

Remediation

Patch Available

http://www.securityfocus.com/bid/8231

Event History

Aug 1, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Aug 27, 2003

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0615?

CVE-2003-0615 is classified as a medium severity vulnerability, primarily due to its potential to exploit cross-site scripting.

How do I fix CVE-2003-0615?

To fix CVE-2003-0615, you should upgrade CGI.pm to the latest version that is not affected by this vulnerability.

Which versions are affected by CVE-2003-0615?

CVE-2003-0615 affects CGI.pm versions 2.73 through 2.79 and specific versions of OpenPKG and Debian Linux.

Can CVE-2003-0615 be exploited remotely?

Yes, CVE-2003-0615 can be exploited remotely by attackers through crafted URLs.

What type of attack is associated with CVE-2003-0615?

CVE-2003-0615 is associated with cross-site scripting (XSS) attacks, allowing the injection of malicious scripts.