Bonsai (Mozilla) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2003-04-02. Vendor: Mozilla.

CVEs of Bonsai

• CVE-2003-0154 - CVSS 6.8 (medium), 2003-04-02: Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or…
• CVE-2003-0153 - CVSS 5 (medium), 2003-04-02: bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3)…
• CVE-2003-0152 - CVSS 7.5 (high), 2003-04-02: Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.
• CVE-2003-0155 - CVSS 5 (medium), 2003-04-02: bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.