CVE-2003-0615

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713
• http://marc.info/?l=bugtraq&m=105880349328877&w=2
• http://marc.info/?l=bugtraq&m=106018783704468&w=2
• http://marc.info/?l=full-disclosure&m=105875211018698&w=2
• http://secunia.com/advisories/13638
• http://securitytracker.com/id?1007234
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1
• http://www.ciac.org/ciac/bulletins/n-155.shtml
• http://www.debian.org/security/2003/dsa-371
• http://www.kb.cert.org/vuls/id/246409US Government Resource
• http://www.redhat.com/support/errata/RHSA-2003-256.html
• http://www.securityfocus.com/bid/8231Patch, Vendor Advisory
• http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12669
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000713
• http://marc.info/?l=bugtraq&m=105880349328877&w=2
• http://marc.info/?l=bugtraq&m=106018783704468&w=2
• http://marc.info/?l=full-disclosure&m=105875211018698&w=2
• http://secunia.com/advisories/13638
• http://securitytracker.com/id?1007234
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1
• http://www.ciac.org/ciac/bulletins/n-155.shtml
• http://www.debian.org/security/2003/dsa-371
• http://www.kb.cert.org/vuls/id/246409US Government Resource
• http://www.redhat.com/support/errata/RHSA-2003-256.html
• http://www.securityfocus.com/bid/8231Patch, Vendor Advisory
• http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2003:084
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12669
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A307
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A470

Published

Aug 27, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0609Stack-based buffer overflow in the runtime linker, ld.so.1, …
• CVE-2003-0610Directory traversal vulnerability in ePO agent for McAfee eP…
• CVE-2003-0611Multiple buffer overflows in xtokkaetama 1.0 allow local use…
• CVE-2003-0612Multiple buffer overflows in main.c for Crafty 19.3 allow lo…
• CVE-2003-0613Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlie…
• CVE-2003-0614Cross-site scripting (XSS) vulnerability in search.php of Ga…
• CVE-2003-0616Format string vulnerability in ePO service for McAfee ePolic…
• CVE-2003-0617mindi 0.58 and earlier does not properly create temporary fi…
• CVE-2003-0618Multiple vulnerabilities in suidperl 5.6.1 and earlier allow…
• CVE-2003-0619Integer signedness error in the decode_fh function of nfs3xd…
• CVE-2003-0620Multiple buffer overflows in man-db 2.4.1 and earlier, when …
• CVE-2003-0621The Administration Console for BEA Tuxedo 8.1 and earlier al…