CVE ID:	CVE-2012-0466
Description:	template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive bug information via a crafted web page.
Test IDs:	1.3.6.1.4.1.25623.1.0.71274
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0466 Bugtraq: 20120418 Security advisory for Bugzilla 4.2.1, 4.0.6 and 3.6.9 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-04/0135.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079604.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079432.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079481.html