CVE-2003-0615: Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter

Description

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

Exploitation

Is it being used?

Exploit prediction (EPSS)4.4% · higher than 91% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CG

Cgi.pm · Cgi.pm

2.73; 2.74; 2.75; 2.76; 2.78; 2.79; +3 more · source: NVD

DL

Debian Linux · Debian

3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +5 more · source: NVD

OP

Openpkg · Openpkg

1.2; 1.3; current · source: NVD