would be interesting to know how long it was possible to "get #administrative privileges by simply registering using an address from one of the domains of the #Bugzilla installation owner" ? http://krebsonsecurity.com/2014/10/bugzilla-zero-day-exposes-zero-day-bugs/ cc @question