Vulnerabilities > Mozilla > Bugzilla > 2.16.11

DATE CVE VULNERABILITY TITLE RISK
2005-01-04 CVE-2004-1061 Cross-Site Scripting vulnerability in Bugzilla Internal Error
Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
network
mozilla
4.3
2002-12-31 CVE-2002-2260 Cross-Site Scripting vulnerability in Mozilla Bugzilla
Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page.
network
mozilla CWE-79
4.3