CVE-2006-5455
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-5455
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to create, modify, or delete arbitrary bug reports via a crafted URL.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mozilla Bugzilla 'editversions.cgi'跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bugzilla是很多软件项目都在使用的基于Web的bug跟踪系统。 Bugzilla中存在多个安全漏洞，具体如下： Bugzilla editversions.cgi中存在跨站请求伪造漏洞，远程援助用户可以借助特制的URL可以建立,修改或删除任意BUG报告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-5455
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-5455
请登录查看更多情报信息。
- https://bugzilla.mozilla.org/show_bug.cgi?id=281181x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2006-5455
Same Patch Batch · n/a · 2006-10-23 · 20 CVEs total
| CVE-2006-5450 | Kinesis Interactive Cinema System 'Index.ASP' SQL注入漏洞 | |
| CVE-2006-5460 | Hinton Design phpht Topsites 多个PHP远程文件包含漏洞 | |
| CVE-2006-5459 | Download-Engine 多个PHP远程文件包含漏洞 | |
| CVE-2006-5458 | Hinton Design phpht Topsites 'common.php'PHP远程文件包含漏洞 | |
| CVE-2006-5457 | Casinosoft Casino Script 注册表格多个跨站脚本攻击漏洞 | |
| CVE-2006-5456 | GraphicsMagick 'coders/dcm.c' PALM及DCM图形处理溢出漏洞 | |
| CVE-2006-5454 | Mozilla Bugzilla 'attachment.cgi和show_bug.cgi'敏感信息泄露漏洞 | |
| CVE-2006-5453 | Mozilla Bugzilla 多个跨站脚本漏洞 | |
| CVE-2006-5452 | HP DTMail附件-a选项参数缓冲区溢出漏洞 | |
| CVE-2006-5451 | TorrentFlux 多个跨站脚本攻击漏洞 | |
| CVE-2006-3455 | Symantec AntiVirus 'SAVRT.SYS'驱动本地权限提升漏洞 | |
| CVE-2006-5449 | Ingo Procmail驱动Shell命令执行漏洞 | |
| CVE-2006-5448 | Microsoft Windows Digital Rights Management System 'drmstor.dll'ActiveX对象拒绝服务漏洞 | |
| CVE-2006-5447 | Dev Web Manager System 'Index.PHP'跨站脚本攻击漏洞 | |
| CVE-2006-5446 | Casinosoft Casino Script 'Config.PHP' SQL注入漏洞 | |
| CVE-2006-5445 | Asterisk 'Chan_Sip.c' SIP channel驱动程序未明远程拒绝服务漏洞 | |
| CVE-2006-5444 | Asterisk 'chan_skinny.c'远程缓冲区溢出漏洞 | |
| CVE-2006-5443 | XIAO Gang WWW Interactive Mathematics Server 变量权限未明漏洞 | |
| CVE-2003-1307 | Apache mod_php模块文件描述符本地泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2006-5455
No comments yet