CVE-2007-0791

Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Link	Resource
http://www.bugzilla.org/security/2.20.3/	Vendor Advisory
http://www.securityfocus.com/bid/22380
http://securitytracker.com/id?1017585
http://secunia.com/advisories/24031
http://securityreason.com/securityalert/2222
http://osvdb.org/33090
http://www.vupen.com/english/advisories/2007/0477
https://exchange.xforce.ibmcloud.com/vulnerabilities/32248
http://www.securityfocus.com/archive/1/459025/100/0/threaded

Configuration 1

cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.21.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.23.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*

---

Published : 2007-02-06 07:28

Updated : 2018-10-16 04:34

---

NVD link : CVE-2007-0791

Mitre link : CVE-2007-0791

Bugzilla

Mozilla

NVD-CWE-Other