Multiple Sun Solaris perl modules problems

Safe.pm protection bypass, CGI.pm crossite scripting...

Debian DSA-371-1 : perl - XSS

A cross-site scripting vulnerability exists in the startform function in CGI.pm. This function outputs user-controlled data into the action attribute of a form element without sanitizing it, allowing a remote user to execute arbitrary web script within the context of the generated page. Any progr...

RHEL 2.1 : perl (RHSA-2003:257)

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Two security issues have been found in Perl that...

Important: Red Hat Security Advisory: : : : Updated Perl packages fix security issues.

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Updated 3 Oct 2003 Updated modperl packages have been added for Red Hat Linux 7.1, which are required due to the move to Perl version 5.6.1 on this platform. Perl i...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Two security issues have been found in Perl that...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

[SECURITY] [DSA-371-1] New perl packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 371-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 11th, 2003 http://www.debian.org/security/faq -...

DSA-371 perl - cross-site scripting

Bulletin has no description...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Technical details for CVE-2003-0615 are not publicly available in the provided documents. Monitor for updates.

[Full-Disclosure] CGI.pm vulnerable to Cross-site Scripting.

Advisory Title: CGI.pm vulnerable to Cross-site Scripting. Release Date: July 19 2003 Application: CGI.pm - which is by default included in many common Perl distributions. Platform: Most platforms. Tested on Apache and IIS. Version: CGI.pm Severity: Effects scripts which make use of startform...