| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-1061 | 4.3 |
Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
|
11-07-2017 - 01:30 | 04-01-2005 - 05:00 | |
| CVE-2005-1565 | 5.0 |
Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history.
|
18-10-2016 - 03:21 | 12-05-2005 - 04:00 | |
| CVE-2005-1563 | 5.0 |
Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.
|
18-10-2016 - 03:20 | 14-05-2005 - 04:00 |