CVE-2004-0705
N/A
N/A
Summary
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16670
- http://www.securityfocus.com/bid/10698
- http://marc.info/?l=bugtraq&m=108965446813639&w=2
- http://bugzilla.mozilla.org/show_bug.cgi?id=235265
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16670
- http://www.securityfocus.com/bid/10698
- http://marc.info/?l=bugtraq&m=108965446813639&w=2
- http://bugzilla.mozilla.org/show_bug.cgi?id=235265
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.