post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=111592031902962&w=2 | |
http://secunia.com/advisories/15338 | Patch Vendor Advisory |
http://www.bugzilla.org/security/2.16.8/ | Exploit Patch Vendor Advisory |
http://www.osvdb.org/16426 | Patch Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=287109 | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 | |
http://marc.info/?l=bugtraq&m=111592031902962&w=2 | |
http://secunia.com/advisories/15338 | Patch Vendor Advisory |
http://www.bugzilla.org/security/2.16.8/ | Exploit Patch Vendor Advisory |
http://www.osvdb.org/16426 | Patch Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=287109 | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-05-12 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-1564
Mitre link : CVE-2005-1564
CVE.ORG link : CVE-2005-1564
JSON object : View
Products Affected
mozilla
- bugzilla
CWE