Vulnerability in Mozilla Bugzilla

CVE-2004-0707

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.

Affected products

Mozilla Bugzilla — versions 2.4, 2.6, 2.8
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)