PT-2016-3915

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 4.2.15 Bugzilla versions 4.3.x through 4.4.10 Bugzilla versions 4.5.x through 5.0.1 Description A cross-site scripting XSS issue exists when a local dot configuration is used, allowing remote attackers to inject...

CVE-2015-8508: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug...