• info
• discussion
• exploit
• solution
• references

BugZilla UserPrefs.CGI Groupset Form Element Manipulation Vulnerability

There is no exploit code required.