CVEvulnerability
CVE-2004-0705
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=235265 bugzilla.mozilla.org
- http://marc.info/?l=bugtraq&m=108965446813639&w=2 marc.info
- http://www.securityfocus.com/bid/10698 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16670 exchange.xforce.ibmcloud.com
- http://bugzilla.mozilla.org/show_bug.cgi?id=235265 bugzilla.mozilla.org
- http://marc.info/?l=bugtraq&m=108965446813639&w=2 marc.info
- http://www.securityfocus.com/bid/10698 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16670 exchange.xforce.ibmcloud.com