CVE-2003-0155

CVE-2003-0155 affects bonsai, the Mozilla CVS query tool. It allows remote attackers to access the parameters page without authentication, exposing configuration parameters. CVSS v2 base score is 5.0 (medium) with Network attack vector, low attack complexity, no authentication required, and parti...

Mozilla Bonsai Mutiple Flaws (Auth Bypass, XSS, Cmd Exec, PD)

The remote host has the CGI suite 'Bonsai' installed. This suite is used to browse a CVS repository with a web browser. The remote version of this software is to be vulnerable to various flaws ranging from path disclosure and cross-site scripting to remote command execution. An attacker may explo...

[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 265-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 265-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 265-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2003 http://www.debian.org/security/faq -...

DSA-265 bonsai - several vulnerabilities

Bulletin has no description...

Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities

Author: Stan Bubrouski Date: 19 August 2002 Product: Bonsai Versions Affected: AllCurrent and CVS all vulnerable Severity: Cross Site Scripting is possible in several places due to a lack of stripping of tags from input. Some error messages also contain CSS and reveal the physical path of the...

Mozilla Bonsai - Multiple Cross-Site Scripting Vulnerabilities

Mozilla Bonsai - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/5516/info Multiple cross site scripting vulnerabilities have been reported for the Bonsai tool. An attacker may exploit this vulnerability by causing a victim user to follow a malicious link...

Mozilla Bonsai 1.3 - Full Path Disclosure

Mozilla Bonsai 1.3 - Full Path Disclosure source: https://www.securityfocus.com/bid/5517/info A path disclosure vulnerability has been reported in Mozilla Bonsai. An attacker can exploit this vulnerability by making a malformed request to Bonsai. This causes Bonsai to return an error page to the...

Mozilla Bonsai 1.3 - Full Path Disclosure

source: https://www.securityfocus.com/bid/5517/info A path disclosure vulnerability has been reported in Mozilla Bonsai. An attacker can exploit this vulnerability by making a malformed request to Bonsai. This causes Bonsai to return an error page to the requesting user. This error page will...

Mozilla Bonsai - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/5516/info Multiple cross site scripting vulnerabilities have been reported for the Bonsai tool. An attacker may exploit this vulnerability by causing a victim user to follow a malicious link. Attacker-supplied code may execute within the context of the si...