National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Contains Software Flaws (CVE)
  • CPE Product Version: cpe:/a:mozilla:bonsai:1.3
There are 4 matching records.
Vuln ID Summary CVSS Severity
CVE-2003-0152

Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.

Published: April 02, 2003; 12:00:00 AM -05:00
    V2: 7.5 HIGH
CVE-2003-0153

bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.

Published: April 02, 2003; 12:00:00 AM -05:00
    V2: 5.0 MEDIUM
CVE-2003-0154

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.

Published: April 02, 2003; 12:00:00 AM -05:00
    V2: 6.8 MEDIUM
CVE-2003-0155

bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.

Published: April 02, 2003; 12:00:00 AM -05:00
    V2: 5.0 MEDIUM