From a234c8636f83e268666f3123d077f36aff1d57fd Mon Sep 17 00:00:00 2001 From: =?utf8?q?Fr=C3=A9d=C3=A9ric=20Buclin?= Date: Wed, 4 Aug 2010 23:56:43 +0200 Subject: [PATCH] Bug 577139: (CVE-2010-2758) [SECURITY] request.cgi and duplicates.cgi let you know whether a product exists or not r=mkanat a=LpSolit --- request.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/request.cgi b/request.cgi index b54477cb19..637fb2e5f2 100755 --- a/request.cgi +++ b/request.cgi @@ -206,7 +206,7 @@ sub queue { # Filter results by exact product or component. if (defined $cgi->param('product') && $cgi->param('product') ne "") { - my $product = Bugzilla::Product::check_product(scalar $cgi->param('product')); + my $product = Bugzilla::Product->check(scalar $cgi->param('product')); push(@criteria, "bugs.product_id = " . $product->id); push(@excluded_columns, 'product') unless $cgi->param('do_union'); if (defined $cgi->param('component') && $cgi->param('component') ne "") { -- 2.47.3