Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-5453 Details

Description

Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header.html.tmpl, (2) description fields of certain items in various edit cgi scripts, and (3) the id parameter in showdependencygraph.cgi.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://bugzilla.mozilla.org/show_bug.cgi?id=206037	CVE	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=330555	CVE	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=355728	CVE	Patch
http://secunia.com/advisories/22409	CVE
http://secunia.com/advisories/22790	CVE
http://secunia.com/advisories/22826	CVE
http://security.gentoo.org/glsa/glsa-200611-04.xml	CVE
http://securityreason.com/securityalert/1760	CVE
http://securitytracker.com/id?1017063	CVE	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/29610	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/29619	CVE
http://www.bugzilla.org/security/2.18.5/	CVE
http://www.debian.org/security/2006/dsa-1208	CVE
http://www.osvdb.org/29544	CVE
http://www.osvdb.org/29545	CVE	Patch
http://www.osvdb.org/29549	CVE
http://www.securityfocus.com/archive/1/448777/100/100/threaded	CVE
http://www.securityfocus.com/bid/20538	CVE
http://www.vupen.com/english/advisories/2006/4035	CVE
https://bugzilla.mozilla.org/show_bug.cgi?id=206037	[email protected]	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=330555	[email protected]	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=355728	[email protected]	Patch
http://secunia.com/advisories/22409	[email protected]
http://secunia.com/advisories/22790	[email protected]
http://secunia.com/advisories/22826	[email protected]
http://security.gentoo.org/glsa/glsa-200611-04.xml	[email protected]
http://securityreason.com/securityalert/1760	[email protected]
http://securitytracker.com/id?1017063	[email protected]	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/29610	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/29619	[email protected]
http://www.bugzilla.org/security/2.18.5/	[email protected]
http://www.debian.org/security/2006/dsa-1208	[email protected]
http://www.osvdb.org/29544	[email protected]
http://www.osvdb.org/29545	[email protected]	Patch
http://www.osvdb.org/29549	[email protected]
http://www.securityfocus.com/archive/1/448777/100/100/threaded	[email protected]
http://www.securityfocus.com/bid/20538	[email protected]
http://www.vupen.com/english/advisories/2006/4035	[email protected]

see all 38 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
mozilla bugzilla	2.18 2.18 rc1 2.18 rc2 2.18 rc3 2.18.1
CPE cpe:2.3:a:mozilla:bugzilla:2.18:::::::* cpe:2.3:a:mozilla:bugzilla:2.18:rc1:::::: cpe:2.3:a:mozilla:bugzilla:2.18:rc2:::::: cpe:2.3:a:mozilla:bugzilla:2.18:rc3:::::: cpe:2.3:a:mozilla:bugzilla:2.18.1:::::::* cpe:2.3:a:mozilla:bugzilla:2.18.2:::::::* cpe:2.3:a:mozilla:bugzilla:2.18.3:::::::* cpe:2.3:a:mozilla:bugzilla:2.18.4:::::::* cpe:2.3:a:mozilla:bugzilla:2.18.5:::::::* cpe:2.3:a:mozilla:bugzilla:2.20:::::::* cpe:2.3:a:mozilla:bugzilla:2.20:rc1:::::: cpe:2.3:a:mozilla:bugzilla:2.20:rc2:::::: cpe:2.3:a:mozilla:bugzilla:2.20.1:::::::* cpe:2.3:a:mozilla:bugzilla:2.20.2:::::::* cpe:2.3:a:mozilla:bugzilla:2.22:::::::* cpe:2.3:a:mozilla:bugzilla:2.23:::::::* cpe:2.3:a:mozilla:bugzilla:2.23.1:::::::* cpe:2.3:a:mozilla:bugzilla:2.23.2:::::::* Remediation No remediation found in references.

Product

Versions

mozilla bugzilla

2.18

2.18 rc1

2.18 rc2

2.18 rc3

2.18.1

CPE

cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.23:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.23.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:bugzilla:2.23.2:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 17, 2018	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Oct 23, 2006	Initial Analysis	[email protected]