CVE-2006-5453

Bugzilla 2.18.x < 2.18.6, 2.20.x < 2.20.3, 2.22.x < 2.22.1, 2.23.x < 2.23.3 - Authenticated Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi.

References (19)

Core 19
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29610
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22409
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29619
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1760
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1208
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4035
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017063
Patch vdb-entry x_refsource_osvdb
http://www.osvdb.org/29545
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20538
Issue Tracking x_refsource_confirm
http://www.bugzilla.org/security/2.18.5/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22790
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/29544
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200611-04.xml
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/448777/100/100/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22826
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/29549

Scores

EPSS 0.0187
EPSS Percentile 77.0%

Details

Status published
Products (13)
mozilla/bugzilla 2.18 (4 CPE variants)
mozilla/bugzilla 2.18.1
mozilla/bugzilla 2.18.2
mozilla/bugzilla 2.18.3
mozilla/bugzilla 2.18.4
mozilla/bugzilla 2.18.5
mozilla/bugzilla 2.20 (3 CPE variants)
mozilla/bugzilla 2.20.1
mozilla/bugzilla 2.20.2
mozilla/bugzilla 2.22
... and 3 more
Published Oct 23, 2006
Tracked Since Feb 18, 2026