CVE-2003-0602

Multiple cross-site scripting vulnerabilities (XSS) in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow remote attackers to insert arbitrary HTML or web script via (1) multiple default German and Russian HTML templates or (2) ALT and NAME attributes in AREA tags as used by the GraphViz graph generation feature for local dependency graphs.

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653
• http://www.bugzilla.org/security/2.16.2/
• http://www.securityfocus.com/bid/6861Patch, Vendor Advisory
• http://www.securityfocus.com/bid/6868Patch, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653
• http://www.bugzilla.org/security/2.16.2/
• http://www.securityfocus.com/bid/6861Patch, Vendor Advisory
• http://www.securityfocus.com/bid/6868Patch, Vendor Advisory

Published

Aug 27, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0595Buffer overflow in WiTango Application Server and Tango 2000…
• CVE-2003-0596FDclone 2.00a, and other versions before 2.02a, creates temp…
• CVE-2003-0597Unknown vulnerability in display of Merge before 5.3.23a in …
• CVE-2003-0598Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0599Unknown vulnerability in the Virtual File System (VFS) capab…
• CVE-2003-0601Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2…
• CVE-2003-0603Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and ear…
• CVE-2003-0604Windows Media Player (WMP) 7 and 8, as running on Internet E…
• CVE-2003-0605The RPC DCOM interface in Windows 2000 SP3 and SP4 allows re…
• CVE-2003-0606sup 1.8 and earlier does not properly create temporary files…
• CVE-2003-0607Buffer overflow in xconq 7.4.1 allows local users to become …
• CVE-2003-0609Stack-based buffer overflow in the runtime linker, ld.so.1, …