Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2005-1564

post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.

  • Published: May 12, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-1564
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / bugzilla 2.17.6 2.17.6.x
mozilla / bugzilla 2.16.1 2.16.1.x
mozilla / bugzilla 2.18-rc1 2.18-rc1.x
mozilla / bugzilla 2.16.2 2.16.2.x
mozilla / bugzilla 2.17.4 2.17.4.x
mozilla / bugzilla 2.10 2.10.x
mozilla / bugzilla 2.17.1 2.17.1.x
mozilla / bugzilla 2.16 2.16.x
mozilla / bugzilla 2.14.2 2.14.2.x
mozilla / bugzilla 2.14.3 2.14.3.x
mozilla / bugzilla 2.14.4 2.14.4.x
mozilla / bugzilla 2.19.1 2.19.1.x
mozilla / bugzilla 2.17.5 2.17.5.x
mozilla / bugzilla 2.17.3 2.17.3.x
mozilla / bugzilla 2.16.4 2.16.4.x
mozilla / bugzilla 2.12 2.12.x
mozilla / bugzilla 2.16.3 2.16.3.x
mozilla / bugzilla 2.14.5 2.14.5.x
mozilla / bugzilla 2.17.7 2.17.7.x
mozilla / bugzilla 2.17 2.17.x
mozilla / bugzilla 2.18-rc2 2.18-rc2.x
mozilla / bugzilla 2.14.1 2.14.1.x
mozilla / bugzilla 2.16.5 2.16.5.x
mozilla / bugzilla 2.14 2.14.x
mozilla / bugzilla 2.19.2 2.19.2.x