NetSight
IP …
low3.5

CVE-2009-0481

Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) an…

Impact

Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers.

Affected products

VendorProductAffected versions
MozillaBugzilla
Versions 2.10, 2.12, 2.14, 2.14.1, 2.14.2, 2.14.3

Weakness classification

CWE-79

References