CVSS: 5.0EPSS: 0%CPEs: 24EXPL: 0CVE-2004-0702
https://notcve.org/view.php?id=CVE-2004-0702
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information. DBI de Bugzilla 2.17.1 a 2.17.7 muestra la contraseña de la base de datos en un mensaje de error cuando el servidor SQL no está corriendo, lo que podría permitir a atacantes remotos obtener información sensible. • http://marc.info/?l=bugtraq&m=108965446813639&w=2 http://www.securityfocus.com/bid/10698 https://exchange.xforce.ibmcloud.com/vulnerabilities/16673 •
CVSS: 4.3EPSS: 0%CPEs: 28EXPL: 0CVE-2002-2260
https://notcve.org/view.php?id=CVE-2002-2260
Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page. • http://bugzilla.mozilla.org/show_bug.cgi?id=179329 http://marc.info/?l=bugtraq&m=103837886416560&w=2 http://www.debian.org/security/2002/dsa-218 http://www.securityfocus.com/bid/6257 https://exchange.xforce.ibmcloud.com/vulnerabilities/10707 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •