CVE-2004-0707
N/A
N/A
Summary
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://bugzilla.mozilla.org/show_bug.cgi?id=244272
- http://www.securityfocus.com/bid/10698
- http://marc.info/?l=bugtraq&m=108965446813639&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16668
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=244272
- http://www.securityfocus.com/bid/10698
- http://marc.info/?l=bugtraq&m=108965446813639&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16668
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.