Unscored severity · published Apr 2, 2003
CVE-2003-0155
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication
–
CVSS
1.8%
EPSS
No
On KEV
Description
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BO
Bonsai · Mozilla
1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0155
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0155
Patch
http://www.debian.org/security/2003/dsa-265
Patch
http://www.securityfocus.com/bid/7163
More from Bonsai
–
CVE-2003-0152
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user
–
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi
–
CVE-2003-0154
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to…