CVE-2004-0707

2004-07-2104:00:00

mitre

www.cve.org

AI Score

8.1

Confidence

Low

EPSS

0.002

Percentile

53.2%

JSON

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

References

bugzilla.mozilla.org/show_bug.cgi?id=244272

marc.info/?l=bugtraq&m=108965446813639&w=2

www.securityfocus.com/bid/10698

exchange.xforce.ibmcloud.com/vulnerabilities/16668