ByteOS Network

NVD Vulnerability Details :

CVE-2006-5453

Modified

Source-cve@mitre.org

Published At-23 Oct, 2006 | 17:07

Updated At-17 Oct, 2018 | 21:43

Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Hyperlink	Source	Resource
http://secunia.com/advisories/22409	cve@mitre.org	N/A
http://secunia.com/advisories/22790	cve@mitre.org	N/A
http://secunia.com/advisories/22826	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-200611-04.xml	cve@mitre.org	N/A
http://securityreason.com/securityalert/1760	cve@mitre.org	N/A
http://securitytracker.com/id?1017063	cve@mitre.org	Patch
http://www.bugzilla.org/security/2.18.5/	cve@mitre.org	N/A
http://www.debian.org/security/2006/dsa-1208	cve@mitre.org	N/A
http://www.osvdb.org/29544	cve@mitre.org	N/A
http://www.osvdb.org/29545	cve@mitre.org	Patch
http://www.osvdb.org/29549	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/448777/100/100/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/20538	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2006/4035	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=206037	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=330555	cve@mitre.org	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=355728	cve@mitre.org	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/29610	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/29619	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History