post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product
Reporter | Title | Published | Views | Family All 4 |
---|---|---|---|---|
![]() | CVE-2005-1564 | 14 May 200504:00 | – | cvelist |
![]() | CVE-2005-1564 | 12 May 200504:00 | – | nvd |
![]() | CVE-2005-1564 | 12 May 200500:00 | – | ubuntucve |
![]() | Bugzilla < 2.18.1 Multiple Information Disclosures | 12 May 200500:00 | – | nessus |
Source | Link |
---|---|
exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/42797 |
secunia | www.secunia.com/advisories/15338 |
marc | www.marc.info/ |
osvdb | www.osvdb.org/16426 |
bugzilla | www.bugzilla.org/security/2.16.8/ |
bugzilla | www.bugzilla.mozilla.org/show_bug.cgi |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo