Vulnerabilities > Mozilla > Bonsai > 1.3

DATE CVE VULNERABILITY TITLE RISK
2003-04-02 CVE-2003-0155 Unspecified vulnerability in Mozilla Bonsai 1.3
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.
network
low complexity
mozilla
5.0
2003-04-02 CVE-2003-0154 Cross-Site Scripting vulnerability in Mozilla Bonsai 1.3
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
network
mozilla
6.8
2003-04-02 CVE-2003-0153 Path Disclosure vulnerability in Mozilla Bonsai 1.3
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.
network
low complexity
mozilla
5.0
2003-04-02 CVE-2003-0152 Remote Command Execution vulnerability in Mozilla Bonsai 1.3
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
network
low complexity
mozilla
7.5