SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-08-17 21:00
Updated : 2017-07-10 18:29
NVD link : CVE-2003-1042
Mitre link : CVE-2003-1042
JSON object : View
CWE
Products Affected
mozilla
- bugzilla