post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
References
Link | Resource |
---|---|
http://www.bugzilla.org/security/2.16.8/ | Exploit Patch Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=287109 | Exploit Patch Vendor Advisory |
http://www.osvdb.org/16426 | Patch Vendor Advisory |
http://secunia.com/advisories/15338 | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=111592031902962&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-11 21:00
Updated : 2017-07-10 18:32
NVD link : CVE-2005-1564
Mitre link : CVE-2005-1564
JSON object : View
CWE
Products Affected
mozilla
- bugzilla