CVE

Id
27900  
CVE No.
CVE-2007-4543  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."  
Phase
Assigned (20070827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287823 27900 CVE-2007-4543 BUGTRAQ:20070823 Security Advisory for Bugzilla 3.0, 2.22.1, and 2.20.4  View
287824 27900 CVE-2007-4543 URL:http://www.securityfocus.com/archive/1/archive/1/477630/100/0/threaded  View
287825 27900 CVE-2007-4543 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=386942  View
287826 27900 CVE-2007-4543 CONFIRM:http://www.bugzilla.org/security/2.20.4/  View
287827 27900 CVE-2007-4543 GENTOO:GLSA-200709-18  View
287828 27900 CVE-2007-4543 URL:http://security.gentoo.org/glsa/glsa-200709-18.xml  View
287829 27900 CVE-2007-4543 BID:25425  View
287830 27900 CVE-2007-4543 URL:http://www.securityfocus.com/bid/25425  View
287831 27900 CVE-2007-4543 VUPEN:ADV-2007-2977  View
287832 27900 CVE-2007-4543 URL:http://www.vupen.com/english/advisories/2007/2977  View
287833 27900 CVE-2007-4543 OSVDB:37201  View
287834 27900 CVE-2007-4543 URL:http://osvdb.org/37201  View
287835 27900 CVE-2007-4543 SECTRACK:1018604  View
287836 27900 CVE-2007-4543 URL:http://www.securitytracker.com/id?1018604  View
287837 27900 CVE-2007-4543 SECUNIA:26584  View
287838 27900 CVE-2007-4543 URL:http://secunia.com/advisories/26584  View
287839 27900 CVE-2007-4543 SECUNIA:26971  View
287840 27900 CVE-2007-4543 URL:http://secunia.com/advisories/26971  View
287841 27900 CVE-2007-4543 XF:bugzilla-buildid-xss(36241)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57340 JVNDB-2007-006032 Unreal Commander におけるディレクトリトラバーサルの脆弱性 Unreal Commander には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-4545 27900 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006032.html  View