CVE

Id
5197  
CVE No.
CVE-2002-0807  
Status
Candidate  
Description
Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.  
Phase
Modified (20071101)  
Votes
ACCEPT(3) Baker, Cole, Wall | MODIFY(1) Frech | NOOP(1) Foat  
Comments
Frech> XF:bugzilla-real-name-xss(9304)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27530 5197 CVE-2002-0807 BUGTRAQ:20020608 [BUGZILLA] Security Advisory For Versions of Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2  View
27531 5197 CVE-2002-0807 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html  View
27532 5197 CVE-2002-0807 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=146447  View
27533 5197 CVE-2002-0807 REDHAT:RHSA-2002:109  View
27534 5197 CVE-2002-0807 BID:4964  View
27535 5197 CVE-2002-0807 URL:http://www.securityfocus.com/bid/4964  View
27536 5197 CVE-2002-0807 XF:bugzilla-real-name-xss(9304)  View

Related JVN