Secunia Security Advisory – Some vulnerabilities and a security issue have been reported in Bugzilla, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to potentially disclose sensitive information or to conduct cross-site request forgery attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/74616/sa33781.txt
Source: https://packetstormsecurity.com/files/74616/Secunia-Security-Advisory-33781.html