Bugzilla has multiple vulnerabilities

Bugzilla is a Web-based bug tracking system. Bugzilla suffers from command injection and security bypass vulnerabilities. 1. Failure to properly filter certain inputs allows attackers to inject and execute arbitrary shell commands. 2. The WebServices module fails to properly restrict API methods...