← voltar
CVE-2004-0707

CVE-2004-0707

EPSS 1.0%
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://bugzilla.mozilla.org/show_bug.cgi?id=244272http://marc.info/?l=bugtraq&m=108965446813639&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/16668http://www.securityfocus.com/bid/10698