Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-07-26 21:00
Updated : 2017-07-10 18:30
NVD link : CVE-2004-0705
Mitre link : CVE-2004-0705
JSON object : View
CWE
Products Affected
mozilla
- bugzilla