Lucene search
FreeBSDB9EC7FE3-A38A-11DE-9C6B-003048818F40HistorySep 11, 2009 - 12:00 a.m.
bugzilla -- two SQL injections, sensitive data exposure
2009-09-1100:00:00
vuxml.freebsd.org
16
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.003
Percentile
71.1%
A Bugzilla Security Advisory reports:
It is possible to inject raw SQL into the Bugzilla
database via the “Bug.create” and “Bug.search” WebService
functions.
When a user would change his password, his new password would
be exposed in the URL field of the browser if he logged in right
after changing his password.
References
Related
openvas
openvas
FreeBSD Ports: bugzilla
2009-09-21 00:00:00
Fedora Core 11 FEDORA-2009-9554 (bugzilla)
2009-09-21 00:00:00
FreeBSD Ports: bugzilla
2009-09-21 00:00:00
nessus
nessus
Bugzilla < 3.0.9/3.2.5/3.4.2 Multiple Vulnerabilities
2009-09-14 00:00:00
FreeBSD : bugzilla -- two SQL injections, sensitive data exposure (b9ec7fe3-a38a-11de-9c6b-003048818f40)
2009-09-18 00:00:00
Fedora 10 : bugzilla-3.2.5-1.fc10 (2009-9550)
2009-09-21 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: bugzilla-3.2.5-1.fc11
2009-09-19 00:06:52
[SECURITY] Fedora 10 Update: bugzilla-3.2.5-1.fc10
2009-09-19 00:11:57
[SECURITY] Fedora 11 Update: bugzilla-3.2.6-2.fc11
2010-02-09 05:10:39
seebug
seebug
Mozilla Bugzilla Bug.create()和Bug.search()函数SQL注入漏洞
2009-09-16 00:00:00
Mozilla Bugzilla URL口令信息泄露漏洞
2009-09-16 00:00:00
ubuntucve
ubuntucve
prion
prion
Sql injection
2009-09-15 22:30:00
Sql injection
2009-09-15 22:30:00
Default credentials
2009-09-15 22:30:00
nvd
nvd
cvelist
cvelist
cve
cve
securityvulns
securityvulns
[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection
2009-10-19 00:00:00
debian
debian
[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection
2009-10-17 23:28:49
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2010-06-04 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.003
Percentile
71.1%
Related for B9EC7FE3-A38A-11DE-9C6B-003048818F40