← volver
CVE-2004-0707

CVE-2004-0707

EPSS 1.0%
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://bugzilla.mozilla.org/show_bug.cgi?id=244272http://marc.info/?l=bugtraq&m=108965446813639&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/16668http://www.securityfocus.com/bid/10698