← voltar
CVE-2007-4543

CVE-2007-4543

EPSS 1.4%
Cross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://osvdb.org/37201https://bugzilla.mozilla.org/show_bug.cgi?id=386942http://secunia.com/advisories/26584http://secunia.com/advisories/26971http://security.gentoo.org/glsa/glsa-200709-18.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/36241http://www.bugzilla.org/security/2.20.4/http://www.securityfocus.com/archive/1/477630/100/0/threadedhttp://www.securityfocus.com/bid/25425http://www.securitytracker.com/id?1018604http://www.vupen.com/english/advisories/2007/2977