Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - Patch, Vendor Advisory | |
References | () http://bugzilla.mozilla.org/show_bug.cgi?id=146447 - | |
References | () http://www.iss.net/security_center/static/9304.php - | |
References | () http://www.securityfocus.com/bid/4964 - |
Information
Published : 2002-08-12 04:00
Updated : 2024-11-20 23:39
NVD link : CVE-2002-0807
Mitre link : CVE-2002-0807
CVE.ORG link : CVE-2002-0807
JSON object : View
Products Affected
mozilla
- bugzilla
CWE