PT-2011-1608

Name of the Vulnerable Software and Affected Versions Bugzilla versions 3.7.1 through 4.0rc1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI. Recommendation...

CVE-2010-4569: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI...