CVE-2003-0615

MEDIUM 4.3CVE-2003-0615 · Published 27/08/2003 · updated 16/06/2026

In short

CVE-2003-0615 is a MEDIUM (CVSS 4.3) vulnerability affecting cgi.pm (cgi.pm), openpkg (openpkg).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cgi.pm cgi.pm	`= 2.73= 2.74= 2.75= 2.751= 2.753= 2.76= 2.78= 2.79= 2.93`	No fix yet
openpkg openpkg	`= 1.2= 1.3= current`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

References

distro.conectiva.com.br/atualizacoes
marc.info
marc.info
marc.info
secunia.com/advisories/13638
securitytracker.com/id
sunsolve.sun.com/search/document.do
ciac.org/ciac/bulletins/n-155.shtml
debian.org/security/2003/dsa-371
kb.cert.org/vuls/id/246409 · US Government Resource
redhat.com/support/errata/RHSA-2003-256.html
securityfocus.com/bid/8231 · Patch
wwwnew.mandriva.com/security/advisories
exchange.xforce.ibmcloud.com/vulnerabilities/12669
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free