{"api_version":"1","generated_at":"2026-07-23T09:53:57+00:00","cve":"CVE-2003-1543","urls":{"html":"https://cve.report/CVE-2003-1543","api":"https://cve.report/api/cve/CVE-2003-1543.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2003-1543","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-1543"},"summary":{"title":"CVE-2003-1543","description":"Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.","state":"PUBLISHED","assigner":"mitre","published_at":"2003-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html","name":"http://www.geocities.com/gzhangx/websrv/docs/security.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"BajieServer security page","mime":"text/html","httpstatus":"502","archivestatus":"200"},{"url":"http://secunia.com/advisories/8477","name":"http://secunia.com/advisories/8477","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Bajie Web Server Cross Site Scripting","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.lucaercoli.it/advs/bajie.txt","name":"http://www.lucaercoli.it/advs/bajie.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Luca Ercoli - IT Security Specialist","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11687","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11687","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/7344","name":"http://www.securityfocus.com/bid/7344","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bajie Error Message Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1006428","name":"http://securitytracker.com/id?1006428","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"BajieServer Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securiteam.com/securitynews/5LP10009FC.html","name":"http://www.securiteam.com/securitynews/5LP10009FC.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Bajie HTTP Server Cross-Site Scripting Vulnerability' - SecuriTeam","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-1543","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1543","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2003","cve_id":"1543","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bajie","cpe5":"java_http_server","cpe6":"0.95","cpe7":"zxc","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"1543","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bajie","cpe5":"java_http_server","cpe6":"0.95","cpe7":"zxe","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T02:35:15.845Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"bajie-error-message-xss(11687)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11687"},{"name":"7344","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/7344"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.securiteam.com/securitynews/5LP10009FC.html"},{"name":"8477","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/8477"},{"name":"1006428","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1006428"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.lucaercoli.it/advs/bajie.txt"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2003-03-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"bajie-error-message-xss(11687)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11687"},{"name":"7344","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/7344"},{"tags":["x_refsource_MISC"],"url":"http://www.securiteam.com/securitynews/5LP10009FC.html"},{"name":"8477","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/8477"},{"name":"1006428","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1006428"},{"tags":["x_refsource_MISC"],"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html"},{"tags":["x_refsource_MISC"],"url":"http://www.lucaercoli.it/advs/bajie.txt"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-1543","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"bajie-error-message-xss(11687)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11687"},{"name":"7344","refsource":"BID","url":"http://www.securityfocus.com/bid/7344"},{"name":"http://www.securiteam.com/securitynews/5LP10009FC.html","refsource":"MISC","url":"http://www.securiteam.com/securitynews/5LP10009FC.html"},{"name":"8477","refsource":"SECUNIA","url":"http://secunia.com/advisories/8477"},{"name":"1006428","refsource":"SECTRACK","url":"http://securitytracker.com/id?1006428"},{"name":"http://www.geocities.com/gzhangx/websrv/docs/security.html","refsource":"MISC","url":"http://www.geocities.com/gzhangx/websrv/docs/security.html"},{"name":"http://www.lucaercoli.it/advs/bajie.txt","refsource":"MISC","url":"http://www.lucaercoli.it/advs/bajie.txt"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2003-1543","datePublished":"2008-02-13T23:00:00.000Z","dateReserved":"2008-02-13T00:00:00.000Z","dateUpdated":"2024-08-08T02:35:15.845Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2003-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bajie:java_http_server:0.95:zxc:*:*:*:*:*:*","matchCriteriaId":"67BD5099-B55E-4F03-A54A-F41A3E6CD27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bajie:java_http_server:0.95:zxe:*:*:*:*:*:*","matchCriteriaId":"FEE9C18B-0FD3-406C-8967-3D1FB3B2A978"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2003","CveId":"1543","Ordinal":"1","Title":"CVE-2003-1543","CVE":"CVE-2003-1543","Year":"2003"},"notes":[{"CveYear":"2003","CveId":"1543","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.","Type":"Description","Title":"CVE-2003-1543"},{"CveYear":"2003","CveId":"1543","Ordinal":"2","NoteData":"2008-02-13","Type":"Other","Title":"Published"},{"CveYear":"2003","CveId":"1543","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}