Published: 23/10/2006 Updated: 17/10/2018

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x prior to 2.18.6, 2.20.x prior to 2.20.3, 2.22.x prior to 2.22.1, and 2.23.x prior to 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla bugzilla 2.18.4
mozilla bugzilla 2.18.5
mozilla bugzilla 2.20
mozilla bugzilla 2.22
mozilla bugzilla 2.18.2
mozilla bugzilla 2.18.3
mozilla bugzilla 2.20.1
mozilla bugzilla 2.20.2
mozilla bugzilla 2.18
mozilla bugzilla 2.23
mozilla bugzilla 2.23.1
mozilla bugzilla 2.18.1
mozilla bugzilla 2.23.2

Several remote vulnerabilities have been discovered in the Bugzilla bug tracking system, which may lead to the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4534 Javier Fernández-Sanguino Peña discovered that insecure temporary file usage may lead to denial of se ...

NVD-CWE-Other https://bugzilla.mozilla.org/show_bug.cgi?id=206037 https://bugzilla.mozilla.org/show_bug.cgi?id=330555 https://bugzilla.mozilla.org/show_bug.cgi?id=355728 http://www.osvdb.org/29545 http://securitytracker.com/id?1017063 http://security.gentoo.org/glsa/glsa-200611-04.xml http://www.securityfocus.com/bid/20538 http://secunia.com/advisories/22790 http://www.debian.org/security/2006/dsa-1208 http://secunia.com/advisories/22826 http://www.bugzilla.org/security/2.18.5/http://www.osvdb.org/29544 http://www.osvdb.org/29549 http://secunia.com/advisories/22409 http://securityreason.com/securityalert/1760 http://www.vupen.com/english/advisories/2006/4035 https://exchange.xforce.ibmcloud.com/vulnerabilities/29619 https://exchange.xforce.ibmcloud.com/vulnerabilities/29610 http://www.securityfocus.com/archive/1/448777/100/100/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1208

CVE-2006-5453

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect