post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
                
            References
                    | Link | Resource | 
|---|---|
| http://marc.info/?l=bugtraq&m=111592031902962&w=2 | |
| http://secunia.com/advisories/15338 | Patch Vendor Advisory | 
| http://www.bugzilla.org/security/2.16.8/ | Exploit Patch Vendor Advisory | 
| http://www.osvdb.org/16426 | Patch Vendor Advisory | 
| https://bugzilla.mozilla.org/show_bug.cgi?id=287109 | Exploit Patch Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 | 
Configurations
                    Configuration 1 (hide)
            
            
  | 
    
History
                    No history.
Information
                Published : 2005-05-12 04:00
Updated : 2017-07-11 01:32
NVD link : CVE-2005-1564
Mitre link : CVE-2005-1564
CVE.ORG link : CVE-2005-1564
JSON object : View
Products Affected
                mozilla
- bugzilla
 
CWE
                