Lucene search
PRIOn knowledge basePRION:CVE-2013-1743HistoryOct 24, 2013 - 10:53 a.m.
Cross site scripting
2013-10-2410:53:00
PRIOn knowledge base
www.prio-n.com
14
Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the (1) summary or (2) real name field. NOTE: this issue exists because of an incomplete fix for CVE-2012-4189.
Related
cvelist
cvelist
CVE-2013-1743
2022-10-03 16:14:49
CVE-2012-4189
2012-11-16 11:00:00
nvd
nvd
CVE-2013-1743
2013-10-24 10:53:09
CVE-2012-4189
2012-11-16 12:24:24
ubuntucve
ubuntucve
CVE-2013-1743
2013-10-24 00:00:00
CVE-2012-4189
2012-11-16 00:00:00
cve
cve
CVE-2013-1743
2022-10-03 16:14:49
CVE-2012-4189
2012-11-16 12:24:24
nessus
nessus
Fedora 18 : bugzilla-4.2.7-1.fc18 (2013-19458)
2013-10-29 00:00:00
Fedora 20 : bugzilla-4.2.7-1.fc20 (2013-19402)
2013-11-11 00:00:00
Fedora 19 : bugzilla-4.2.7-1.fc19 (2013-19480)
2013-10-29 00:00:00
openvas
openvas
Fedora Update for bugzilla FEDORA-2013-19480
2013-10-29 00:00:00
Fedora Update for bugzilla FEDORA-2013-19480
2013-10-29 00:00:00
Fedora Update for bugzilla FEDORA-2013-19458
2013-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: bugzilla-4.2.7-1.fc20
2013-11-10 07:27:24
[SECURITY] Fedora 19 Update: bugzilla-4.2.7-1.fc19
2013-10-29 03:47:45
[SECURITY] Fedora 18 Update: bugzilla-4.2.7-1.fc18
2013-10-29 03:46:48
freebsd
freebsd
bugzilla -- multiple vulnerabilities
2013-10-16 00:00:00
bugzilla -- multiple vulnerabilities
2012-11-13 00:00:00
securityvulns
securityvulns
Security Advisory for Bugzilla 4.4.1, 4.2.7 and 4.0.11
2013-10-27 00:00:00
[ MDVSA-2013:285 ] bugzilla
2013-12-09 00:00:00
Security advisory for Bugzilla 4.4rc1, 4.2.4, 4.0.9 and 3.6.12
2012-11-18 00:00:00
prion
prion
Cross site scripting
2012-11-16 12:24:00
exploitpack
exploitpack
Bugzilla 4.2 - Tabular Reports Cross-Site Scripting
2013-10-09 00:00:00
mageia
mageia
Updated bugzilla package fixes multiple vulnerabilities
2014-05-02 21:50:55
exploitdb
exploitdb
Bugzilla 4.2 - Tabular Reports Cross-Site Scripting
2013-10-09 00:00:00