bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3)...
6.3AI Score
0.009EPSS
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person...
6.5AI Score
0.011EPSS
Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data...
7.4AI Score
0.005EPSS
bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without...
6.7AI Score
0.007EPSS