CVE-2006-0916 - CVE Reference - Advisories

CVE Reference: CVE-2006-0916

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-0916

Description: Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/24821 SREASON http://securityreason.com/securityalert/464 SAID Secunia Advisory: SA18979 CONFIRM BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/425584/100/0/threaded BID 16745

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Opera Multiple Vulnerabilities

2.	Anzio Web Print Object (WePO) ActiveX Component "mainurl" Buffer Overflow

3.	vBulletin Private Message Subject Script Insertion

4.	Folder Lock Weak Password Encryption Security Issue

5.	neon "parse_domain() " Denial of Service Vulnerability

6.	SunShop Shopping Cart class.ajax.php SQL Injection Vulnerabilities

7.	Short Url & Url Tracker Script "id" SQL Injection Vulnerability

8.	PHP Live Helper Multiple Vulnerabilities

9.	URL Rotator Script "id" SQL Injection Vulnerability

10.	Programs Rating "id" SQL Injection Vulnerability