Bugzilla Cross Site Scripting and Security Bypass Vulnerabilities

Bugzilla Cross Site Scripting and Security Bypass Vulnerabilities

References:

Bugzilla Homepage (Bugzilla)
4.1.3, 4.0.2, 3.6.6, and 3.4.12 Security Advisory (Bugzilla)
Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular a (Bugzilla)
Bug 697699 - (CVE-2011-3657) [SECURITY] XSS when viewing new charts or tabular a (Bugzilla)
Bug 711714 - (CVE-2011-3667) [SECURITY] The User.offer_account_by_email WebServi (Bugzilla)
Bugzilla: Cross-Site Scripting in Chart Generator (RedTeam Pentesting GmbH)

Privacy Statement
Copyright 2010, SecurityFocus