Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla bugzilla 2.16.6 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2004-1061
Cross-site scripting (XSS) vulnerability in Bugzilla prior to 2.18, including 2.16.x prior to 2.16.11, allows remote malicious users to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.17Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.7Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.16.10Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.5
7.5
CVSSv2
CVE-2005-4534
The shadow database feature (syncshadowdb) in Bugzilla 2.9 up to and including 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.10Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.9Mozilla Bugzilla 2.10Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.7
5
CVSSv2
CVE-2005-1563
Bugzilla 2.10 up to and including 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote malicious users to determine hidden products.
Mozilla Bugzilla 2.10Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.7Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.18Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.10Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.19.1
4.3
CVSSv2
CVE-2002-2260
Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 up to and including 2.17 allows remote malicious users to inject arbitrary web script or HTML via the "show all quips" page.
Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.17Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.10Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.16Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12
7.5
CVSSv2
CVE-2004-0707
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x prior to 2.16.6, and 2.18 prior to 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.8Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.17Mozilla Bugzilla 2.4Mozilla Bugzilla 2.6Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.2
3.5
CVSSv2
CVE-2008-2105
email_in.pl in Bugzilla 2.23.4, 3.0.x prior to 3.0.4, and 3.1.x prior to 3.1.4 allows remote authenticated users to more easily spoof the changer of a bug via a @reporter command in the body of an e-mail message, which overrides the e-mail address as normally obtained from the Fr...
Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.23Mozilla Bugzilla 2.23.1Mozilla Bugzilla 3.0.0Mozilla Bugzilla 3.0.1Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.16.2
5.8
CVSSv2
CVE-2009-0483
Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 prior to 2.22.7, 3.0 prior to 3.0.7, 3.2 prior to 3.2.1, and 3.3 prior to 3.3.2 allows remote malicious users to delete keywords and user preferences via a link or IMG tag to (1) editkeywords.cgi or (2) userprefs.cg...
Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.11Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.18.7Mozilla Bugzilla 2.18Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.22.4Mozilla Bugzilla 2.22Mozilla Bugzilla 3.0.5Mozilla Bugzilla 3.0.6Mozilla Bugzilla 2.10Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.4
3.5
CVSSv2
CVE-2009-0481
Bugzilla 2.x prior to 2.22.7, 3.0 prior to 3.0.7, 3.2 prior to 3.2.1, and 3.3 prior to 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.
Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.16.10Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18Mozilla Bugzilla 2.19Mozilla Bugzilla 2.18.9Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.20.4Mozilla Bugzilla 2.22Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.22.6Mozilla Bugzilla 3.2Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.16.11
5.8
CVSSv2
CVE-2009-0482
Cross-site request forgery (CSRF) vulnerability in Bugzilla prior to 3.2 prior to 3.2.1, 3.3 prior to 3.3.2, and other versions prior to 3.2 allows remote malicious users to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi.
Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.20Mozilla Bugzilla 2.18Mozilla Bugzilla 2.20.2Mozilla Bugzilla 2.20.3Mozilla Bugzilla 2.22Mozilla Bugzilla 2.22.1Mozilla Bugzilla 3.0.1Mozilla Bugzilla 3.0.2Mozilla Bugzilla 3.3.1Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.14.2
4.3
CVSSv2
CVE-2009-3989
Bugzilla prior to 3.0.11, 3.2.x prior to 3.2.6, 3.4.x prior to 3.4.5, and 3.5.x prior to 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote malicious users to obtain sensitive information via requests for (1) CVS/, (2) ...
Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0.6Mozilla Bugzilla 3.0.7Mozilla Bugzilla 3.0.9Mozilla Bugzilla 3.4.2Mozilla Bugzilla 3.4.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.22.4Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.18.6Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.16.7Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16Mozilla Bugzilla 2.12Mozilla Bugzilla 2.10Mozilla Bugzilla 3.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook