Логотип exploitDog
bind:CVE-2012-0466
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-0466

Количество 4

Количество 4

ubuntu логотип

CVE-2012-0466

почти 14 лет назад

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

CVSS2: 4
EPSS: Низкий
nvd логотип

CVE-2012-0466

почти 14 лет назад

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

CVSS2: 4
EPSS: Низкий
debian логотип

CVE-2012-0466

почти 14 лет назад

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3 ...

CVSS2: 4
EPSS: Низкий
github логотип

GHSA-cq7j-j393-9f9w

почти 4 года назад

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-0466

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

CVSS2: 4
0%
Низкий
почти 14 лет назад
nvd логотип
CVE-2012-0466

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

CVSS2: 4
0%
Низкий
почти 14 лет назад
debian логотип
CVE-2012-0466

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3 ...

CVSS2: 4
0%
Низкий
почти 14 лет назад
github логотип
GHSA-cq7j-j393-9f9w

template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.

0%
Низкий
почти 4 года назад

Уязвимостей на страницу