CVE-2005-1564 | BDVDB-2026-10222 Detail

Description#

post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.bugzilla.org/security/2.16.8/
http://marc.info/?l=bugtraq&m=111592031902962&w=2
https://bugzilla.mozilla.org/show_bug.cgi?id=287109
http://www.osvdb.org/16426
http://secunia.com/advisories/15338
https://exchange.xforce.ibmcloud.com/vulnerabilities/42797

Exploit#

No public exploit known

History#

Version 12005-05-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.