SUSE CVE-2005-2173

The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via processbug.cgi...

bugzilla -- multiple vulnerabilities

A Bugzilla Security Advisory reports: Any user can change any flag on any bug, even if they don't have access to that bug, or even if they can't normally make bug changes. This also allows them to expose the summary of a bug. Bugs are inserted into the database before they are marked as private, ...

CVE-2002-1111

printallbugpage.php in Mantis 0.17.3 and earlier does not verify the limitreporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted...

CVE-2002-1111

printallbugpage.php in Mantis 0.17.3 and earlier does not verify the limitreporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted...