what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Dave Miller

bugzilla-multiple.txt

Posted Feb 6, 2007

Authored by Dave Miller, Frederic Buclin, Max Kanat-Alexander, Olav Vitters | Site bugzilla.org

Bugzilla Security Advisory - Bugzilla versions 2.20.1 and above suffer from a cross site scripting vulnerability. Version 2.23.3 suffers from a database password disclosure flaw.

tags | advisory, xss

SHA-256 | bd0c4a12dd51f408be7b023cc02ae95aab38c12993a36d47007d685ec3cac8a8

Download | Favorite | View

bugzilla5issues.txt

Posted Nov 4, 2003

Authored by Dave Miller | Site bugzilla.org

Bugzilla Security Advisory - Five security related bugs have been discovered in this web-based bug tracking system. Two relate to SQL injection attacks via privileged user accounts. A third allows ex-members of a deleted group to get inserted into a new group if it is created reusing the same name. Two other issues allow extraction of bug information for any known email address and for a user to obtain descriptions for a product they do not have access to.

tags | advisory, web, sql injection

SHA-256 | 39b258a4c1f61e7a04f61190675f88517211c8525b062d55c9f258be69b46223

Download | Favorite | View