Remote vulnerabilities in Bugzilla

Help Net Security warns of a bug in Bugzilla which allows users registering to run arbitrary commands as a non-priveledged user on the server.