Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla bugzilla 2.19.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2006-0916
Bugzilla 2.19.3 up to and including 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another dom...
Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.19.3
5
CVSSv2
CVE-2005-3139
Bugzilla 2.19.1 up to and including 2.20rc2 and 2.21, with user matching turned on in substring mode, allows malicious users to list all users whose names match an arbitrary substring, even when the usevisibilitygroups parameter is set.
Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3
5
CVSSv2
CVE-2005-3138
Bugzilla 2.18rc1 up to and including 2.18.3, 2.19 up to and including 2.20rc2, and 2.21 allows remote malicious users to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.
Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.1
5
CVSSv2
CVE-2005-2173
The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi.
Mozilla Bugzilla 2.18Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.19.1
2.6
CVSSv2
CVE-2005-2174
Bugzilla 2.17.x, 2.18 prior to 2.18.2, 2.19.x, and 2.20 prior to 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows malicious users to access information about the bug via buglist.cgi before MySQL replication is compl...
Mozilla Bugzilla 2.18Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.19.3
5.5
CVSSv2
CVE-2006-0913
SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 up to and including 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.
Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.18Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.4
4.3
CVSSv2
CVE-2007-4543
Cross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 up to and including 2.20.4, 2.22.x prior to 2.22.3, and 3.x prior to 3.0.1 allows remote malicious users to inject arbitrary web script or HTML via the buildid field in the "guided form."
Mozilla Bugzilla 2.18Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.19Mozilla Bugzilla 2.20.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.2Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.22Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.20.1Mozilla Bugzilla 2.20.2Mozilla Bugzilla 3.0.0Mozilla Bugzilla 2.17.4Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.18.5
5.8
CVSSv2
CVE-2009-0485
Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 prior to 3.0.7, 3.2 prior to 3.2.1, and 3.3 prior to 3.3.2 allows remote malicious users to delete unused flag types via a link or IMG tag to editflagtypes.cgi.
Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.20Mozilla Bugzilla 2.20.6Mozilla Bugzilla 2.20.7Mozilla Bugzilla 2.22.3Mozilla Bugzilla 2.22.4Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0.5Mozilla Bugzilla 2.17.1Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18Mozilla Bugzilla 2.19Mozilla Bugzilla 2.19.1Mozilla Bugzilla 2.20.2Mozilla Bugzilla 2.20.3Mozilla Bugzilla 2.22Mozilla Bugzilla 3.0Mozilla Bugzilla 3.0.1Mozilla Bugzilla 3.2
4.3
CVSSv2
CVE-2008-2103
Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote malicious users to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list.
Mozilla Bugzilla 2.17.2Mozilla Bugzilla 2.17.3Mozilla Bugzilla 2.18.3Mozilla Bugzilla 2.18.4Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20Mozilla Bugzilla 2.21.1Mozilla Bugzilla 2.22Mozilla Bugzilla 2.23Mozilla Bugzilla 3.0.3Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0 Rc1Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18Mozilla Bugzilla 2.20.4Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.22.2Mozilla Bugzilla 2.23.3Mozilla Bugzilla 2.23.4
4
CVSSv2
CVE-2008-6098
Bugzilla 3.2 prior to 3.2 RC2, 3.0 prior to 3.0.6, 2.22 prior to 2.22.6, 2.20 prior to 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to...
Mozilla Bugzilla 2.17.7Mozilla Bugzilla 2.18.1Mozilla Bugzilla 2.18.9Mozilla Bugzilla 2.18.8Mozilla Bugzilla 2.18Mozilla Bugzilla 2.19.3Mozilla Bugzilla 2.20.5Mozilla Bugzilla 2.21.2Mozilla Bugzilla 2.23Mozilla Bugzilla 2.22.1Mozilla Bugzilla 2.23.4Mozilla Bugzilla 3.0.4Mozilla Bugzilla 3.0.0Mozilla Bugzilla 3.0.7Mozilla Bugzilla 3.2Mozilla Bugzilla 3.1.1Mozilla Bugzilla 3.2.1Mozilla Bugzilla 2.17.5Mozilla Bugzilla 2.17.6Mozilla Bugzilla 2.18.5Mozilla Bugzilla 2.19.2Mozilla Bugzilla 2.20
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook