exploits , vulnerabilities , articles , CGI.pm Start_Form Cross-Site Scripting Vulnerability

Title	CGI.pm Start_Form Cross-Site Scripting Vulnerability
Published	2003-07-20-12:00AM
Updated	2005-06-23-02:08PM
Class	Input Validation Error
CVE	CAN-2003-0615
Remote	Yes
Local	No
Credit	Discovery of this issue is credited to obscure <dontreply@eyeonsecurity.org>.
Vulnerable	Sun Solaris 9.0 _x86 Update 2 Sun Solaris 9.0 _x86 Sun Solaris 9.0 Sun Solaris 8.0 _x86 Sun Solaris 8.0 Sun Linux 5.0.7 SOTLinux SOTLinux 2003 Server SOTLinux SOTLinux 2003 Desktop SGI ProPack 2.3 SGI ProPack 2.2.1 SCO Open Server 5.0.7 SCO Open Server 5.0.6 a SCO Open Server 5.0.6 SCO Open Server 5.0.5 RedHat Linux Advanced Work Station 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 2.1 OpenPKG OpenPKG 1.3 OpenPKG OpenPKG 1.2 OpenPKG OpenPKG Current MandrakeSoft Single Network Firewall 7.2 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Corporate Server 2.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha CGI.pm CGI.pm 2.753 CGI.pm CGI.pm 2.752 Sun Solaris 9.0 Sun Solaris 9.0 _x86 CGI.pm CGI.pm 2.751 CGI.pm CGI.pm 2.93 CGI.pm CGI.pm 2.79 CGI.pm CGI.pm 2.78 CGI.pm CGI.pm 2.76 CGI.pm CGI.pm 2.75 CGI.pm CGI.pm 2.74 CGI.pm CGI.pm 2.73 CGI.pm CGI.pm 2.46
Not Vulnerable	CGI.pm CGI.pm 2.98 CGI.pm CGI.pm 2.97 CGI.pm CGI.pm 2.96 CGI.pm CGI.pm 2.95 CGI.pm CGI.pm 2.94
Code	There is no exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability