Description
Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "Format for Printing" view or "Long Format" bug list.
References
- 29038 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=425665
- 30167 third-party-advisory
- FEDORA-2008-3442 vendor-advisory
- 1019967 vdb-entry
- FEDORA-2008-3488 vendor-advisory
- 30064 third-party-advisory
- bugzilla-bugview-xss(42216) vdb-entry
- http://www.bugzilla.org/security/2.20.5/
- ADV-2008-1428 vdb-entry