info
discussion
exploit
solution
references
BugZilla UserPrefs.CGI Groupset Form Element Manipulation Vulnerability
References:
Bugzilla Bug 108822 [security] Any user can change their groupset!
(Mozilla)
Bugzilla Homepage
(Mozilla)
Privacy Statement
Copyright 2010, SecurityFocus