![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2016-2803 |
Description: | Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.808349 1.3.6.1.4.1.25623.1.0.808388 1.3.6.1.4.1.25623.1.0.808310 1.3.6.1.4.1.25623.1.1.10.2016.0201 1.3.6.1.4.1.25623.1.0.106763 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2016-2803 Bugtraq: 20160516 Security advisory for Bugzilla 5.0.3 and 4.4.12 (Google Search) http://www.securityfocus.com/archive/1/538401/100/0/threaded http://packetstormsecurity.com/files/137079/Bugzilla-4.4.11-5.0.2-Summary-Cross-Site-Scripting.html http://www.securitytracker.com/id/1035891 |