CVE-2012-4189
published 2012-11-16CVE-2012-4189: Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.04%
60.1th percentile
Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version field.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qh88-rwg9-3pjq: Multiple cross-site scripting (XSS) vulnerabilities in report
ghsa_unreviewed·2022-05-17·CVSS 4.3
CVE-2013-1743 [MEDIUM] CWE-79 GHSA-qh88-rwg9-3pjq: Multiple cross-site scripting (XSS) vulnerabilities in report
Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the (1) summary or (2) real name field. NOTE: this issue exists because of an incomplete fix for CVE-2012-4189.
GHSA
GHSA-9cgp-gh54-rmwq: Cross-site scripting (XSS) vulnerability in Bugzilla 4
ghsa_unreviewed·2022-05-17
CVE-2012-4189 [MEDIUM] CWE-79 GHSA-9cgp-gh54-rmwq: Cross-site scripting (XSS) vulnerability in Bugzilla 4
Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version field.
No detection rules found.
Exploit-DB
Bugzilla 4.2 - Tabular Reports Cross-Site Scripting
exploitdb·2013-10-09·CVSS 4.3
CVE-2013-1743 [MEDIUM] Bugzilla 4.2 - Tabular Reports Cross-Site Scripting
Bugzilla 4.2 - Tabular Reports Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/63205/info
Bugzilla is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.
Attackers can exploit this issue to steal cookie-based authentication information, execute arbitrary client-side scripts in the context of the browser, and obtain sensitive information. Other attacks are also possible.
Bugzilla versions 4.1.1 through 4.2.6, and 4.3.1 through 4.4 are vulnerable.
Note: This issue exists due to an incomplete fix for CVE-2012-4189 (identified in BID 56504 - Bugzilla Multiple Cross Site Scripting and Information Disclosure Vulnerabilities).
https://www.example.com/bugzilla-tip/report.cgi?x_axis_field=short_desc&y_axis_field=shor
Exploit-DB
Novell Groupwise - Address Book Remote Code Execution
exploitdb·2012-03-01
CVE-2011-4189 Novell Groupwise - Address Book Remote Code Execution
Novell Groupwise - Address Book Remote Code Execution
---
#####################################################################################
Application: Novell Groupwise Address Book Remote Code Execution
Platforms: Windows
Exploitation: Remote code execution
CVE Number: 2011-4189
Novell TID: 733885
{PRL}: 2012-04
Author: Francis Provencher (Protek Research Lab's)
Website: http://www.protekresearchlab.com/
Twitter: @ProtekResearch
#####################################################################################
1) Introduction
2) Report Timeline
3) Technical details
4) The Code
#####################################################################################
1) Introduction
Novell, Inc. is a global software and services company based in Waltham, Massachusetts.
Bugzilla
CVE-2013-1734 CVE-2013-1742 CVE-2013-1743 bugzilla: multiple flaws corrected in upstream 4.0.11, 4.2.7, 4.4.1
bugzilla·2013-10-17·CVSS 4.3
CVE-2013-1734 [MEDIUM] CVE-2013-1734 CVE-2013-1742 CVE-2013-1743 bugzilla: multiple flaws corrected in upstream 4.0.11, 4.2.7, 4.4.1
CVE-2013-1734 CVE-2013-1742 CVE-2013-1743 bugzilla: multiple flaws corrected in upstream 4.0.11, 4.2.7, 4.4.1
A number of flaws were reported in Bugzilla [1]:
Class: Cross-Site Request Forgery
Versions: 2.16rc1 to 4.0.10, 4.1.1 to 4.2.6, 4.3.1 to 4.4
Fixed In: 4.0.11, 4.2.7, 4.4.1
Description: When an attachment is edited, a token is generated to
validate changes made by the user. Using a crafted URL,
an attacker could force the token to be recreated,
allowing him to bypass the token check and abuse a user
to commit changes on his behalf.
References: https://bugzilla.mozilla.org/show_bug.cgi?id=913904
CVE Number: CVE-2013-1734
Class: Cross-Site Scripting
Versions: 2.17.1 to 4.0.10, 4.1.1 to 4.2.6, 4.3.1 to 4.4
Fixed In: 4.0.11, 4.2.7, 4.4.1
Description: Some parameters passed to editf
Bugzilla
[SECURITY] Field values are not escaped correctly in tabular reports
bugzilla·2012-09-11
[HIGH] [SECURITY] Field values are not escaped correctly in tabular reports
[SECURITY] Field values are not escaped correctly in tabular reports
PoC:
http://localhost/cgi-bin/bug/editversions.cgi?action=add&product=TestProduct ->
Version: ">alert(1);
Add new bug to "TestProduct" with version ">alert(1);
http://localhost/cgi-bin/bug/query.cgi?format=report-table ->
Horizontal Axis: Version
should be the results: Version: ">alert(1);
-> Generate Report
http://localhost/cgi-bin/bug/report.cgi?x_axis_field=version&y_axis_field=&z_axis_field=&query_format=report-table&short_desc_type=allwordssubstr&short_desc=&resolution=---&longdesc_type=allwordssubstr&longdesc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&keywords_type=allwords&keywords=&deadlinefrom=&deadlineto=&bug_id=&bug_id_type=anyexact&version=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&emailassigne
http://www.bugzilla.org/security/3.6.11/http://www.mandriva.com/security/advisories?name=MDVSA-2013:066https://bugzilla.mozilla.org/show_bug.cgi?id=790296http://www.bugzilla.org/security/3.6.11/http://www.mandriva.com/security/advisories?name=MDVSA-2013:066https://bugzilla.mozilla.org/show_bug.cgi?id=790296
2012-11-16
Published