From ce590bf022ef6c2fc0c0c902d773ec7a53e7e4ad Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Mon, 6 Oct 2014 14:25:06 +0000
Subject: Bug 1075578: [SECURITY] Improper filtering of CGI arguments
 r=dkl,a=sgreen

---
 buglist.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'buglist.cgi')

diff --git a/buglist.cgi b/buglist.cgi
index faeb56176..a7eb98df5 100755
--- a/buglist.cgi
+++ b/buglist.cgi
@@ -1014,7 +1014,7 @@ if (scalar(@products) == 1) {
 # This is used in the "Zarroo Boogs" case.
 elsif (my @product_input = $cgi->param('product')) {
     if (scalar(@product_input) == 1 and $product_input[0] ne '') {
-        $one_product = new Bugzilla::Product({ name => $cgi->param('product') });
+        $one_product = new Bugzilla::Product({ name => $product_input[0] });
     }
 }
 # We only want the template to use it if the user can actually 
-- 
cgit v1.2.3-24-g4f1b