Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla bugzilla 2.17.3 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2003-1042
SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and previous versions allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.6Mozilla Bugzilla 2.8Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.4Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3
10
CVSSv2
CVE-2003-1043
SQL injection vulnerability in Bugzilla 2.16.3 and previous versions, and 2.17.1 up to and including 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.4Mozilla Bugzilla 2.10Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.6Mozilla Bugzilla 2.8Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3
7.5
CVSSv2
CVE-2015-4499
Util.pm in Bugzilla 2.x, 3.x, and 4.x prior to 4.2.15, 4.3.x and 4.4.x prior to 4.4.10, and 5.x prior to 5.0.1 mishandles long e-mail addresses during account registration, which allows remote malicious users to obtain the default privileges for an arbitrary domain name by placin...
Mozilla Bugzilla 2.0Mozilla Bugzilla 2.2Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.10Mozilla Bugzilla 2.16.8Mozilla Bugzilla 2.16.9Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.20Mozilla Bugzilla 2.20.7Mozilla Bugzilla 2.21Mozilla Bugzilla 2.22.4Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.8Mozilla Bugzilla 2.10Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.3
7.5
CVSSv2
CVE-2010-4568
Bugzilla 2.14 up to and including 2.22.7; 3.0.x, 3.1.x, and 3.2.x prior to 3.2.10; 3.4.x prior to 3.4.10; 3.6.x prior to 3.6.4; and 4.0.x prior to 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote malicious users to obtain access to arbit...
Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.16.6Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.22.5Mozilla Bugzilla 2.22.6Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.1
7.5
CVSSv2
CVE-2005-1564
post_bug.cgi in Bugzilla 2.10 up to and including 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.17Mozilla Bugzilla 2.17.1
7.5
CVSSv2
CVE-2003-1044
editproducts.cgi in Bugzilla 2.16.3 and previous versions, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned...
Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.4Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.10Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.6Mozilla Bugzilla 2.8
7.5
CVSSv2
CVE-2003-1046
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote malicious users to list component descriptions for otherwise restricted products.
Mozilla Bugzilla 2.12Mozilla Bugzilla 2.14Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.8Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.10Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.4Mozilla Bugzilla 2.6Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.17.1
7.5
CVSSv2
CVE-2004-0707
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x prior to 2.16.6, and 2.18 prior to 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.16Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.8Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.17Mozilla Bugzilla 2.4Mozilla Bugzilla 2.6Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.16.2
7.5
CVSSv2
CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 up to and including 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.16.2Mozilla Bugzilla 2.16.3Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.14.5Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.8Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.16.4Mozilla Bugzilla 2.16.5Mozilla Bugzilla 2.17Mozilla Bugzilla 2.4Mozilla Bugzilla 2.6Mozilla Bugzilla 2.10Mozilla Bugzilla 2.12Mozilla Bugzilla 2.16Mozilla Bugzilla 2.16.1
7.5
CVSSv2
CVE-2003-0013
The default .htaccess scripts for Bugzilla 2.14.x prior to 2.14.5, 2.16.x prior to 2.16.2, and 2.17.x prior to 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote malicious users to ob...
Mozilla Bugzilla 2.14.2Mozilla Bugzilla 2.14.3Mozilla Bugzilla 2.14Mozilla Bugzilla 2.14.1Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.16.1Mozilla Bugzilla 2.17Mozilla Bugzilla 2.14.4Mozilla Bugzilla 2.16
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook