← Database

CVE-2002-0008

HIGH CVSS: 7.5 Published: 2002-01-31 Modified: 2026-06-16

Description

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References