Lucene search
+L

166 matches found

Prion
Prion
•added 2011/01/28 4:00 p.m.•42 views

Cross site scripting

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

4.3CVSS5.9AI score0.01739EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2011/01/28 3:00 p.m.•47 views

CVE-2010-4570

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

5.4AI score0.01739EPSS
SaveExploits0References9
Mend
Mend
•added 2011/01/28 3:00 p.m.•12 views

CVE-2010-4570

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

6.3CVSS0.01739EPSS
SaveExploits0References9
CVE
CVE
•added 2011/01/28 3:00 p.m.•82 views

CVE-2010-4570

CVE-2010-4570 is an XSS vulnerability in Bugzilla’s duplicate-detection feature (Bugzilla 3.7.1/3.7.2/3.7.3/4.0rc1) where the summary field can be exploited via the DataTable widget in YUI to inject arbitrary script/HTML. Connected documents confirm the CVE is referenced among Bugzilla-related ad...

4.3CVSS5.6AI score0.01739EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
•added 2011/01/28 12:00 a.m.•10 views

PT-2011-1609

Name of the Vulnerable Software and Affected Versions Bugzilla versions 3.7.1 through 4.0rc1 Description A cross-site scripting issue exists in the duplicate-detection functionality, allowing remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable...

4.3CVSS0.01739EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/01/28 12:00 a.m.•13 views

CVE-2010-4570: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

4.3CVSS6.1AI score0.01739EPSS
SaveExploits0References2
Rows per page
Query Builder