AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2003-1365

MEDIUM · CVSS 5 EPSS 1.89%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2003-1365
Severity
MEDIUM
CVSS
5
EPSS
1.89%

Original Filing — NVD Description

The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including (1) "\" (backslash), (2) "?", (3) "~" (tilde), (4) "^" (carat), (5) newline, or (6) carriage return, which could allow remote attackers to read or write arbitrary files, or execute arbitrary commands, in shell scripts that rely on CGI::Lite to filter such dangerous inputs.