Lucene search
HistorySep 15, 2009 - 10:30 p.m.
CVE-2009-3165
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.5%
SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
Affected configurations
Node
mozillabugzillaMatch2.23.4
ORmozillabugzillaMatch3.0
ORmozillabugzillaMatch3.0rc1
ORmozillabugzillaMatch3.0.1
ORmozillabugzillaMatch3.0.2
ORmozillabugzillaMatch3.0.3
ORmozillabugzillaMatch3.0.4
ORmozillabugzillaMatch3.0.5
ORmozillabugzillaMatch3.0.6
ORmozillabugzillaMatch3.0.7
ORmozillabugzillaMatch3.0.8
ORmozillabugzillaMatch3.1.1
ORmozillabugzillaMatch3.1.2
ORmozillabugzillaMatch3.1.3
ORmozillabugzillaMatch3.1.4
ORmozillabugzillaMatch3.2
ORmozillabugzillaMatch3.2rc1
ORmozillabugzillaMatch3.2rc2
ORmozillabugzillaMatch3.2.1
ORmozillabugzillaMatch3.2.2
ORmozillabugzillaMatch3.2.3
ORmozillabugzillaMatch3.2.4
ORmozillabugzillaMatch3.3.1
ORmozillabugzillaMatch3.3.2
ORmozillabugzillaMatch3.3.3
ORmozillabugzillaMatch3.3.4
ORmozillabugzillaMatch3.4
ORmozillabugzillaMatch3.4rc1
ORmozillabugzillaMatch3.4.1
Related
openvas
openvas
Debian Security Advisory DSA 1913-1 (bugzilla)
2009-10-27 00:00:00
nessus
nessus
Debian DSA-1913-1 : bugzilla - SQL injection vulnerability
2010-02-24 00:00:00
Fedora 10 : bugzilla-3.2.5-1.fc10 (2009-9550)
2009-09-21 00:00:00
Fedora 11 : bugzilla-3.2.5-1.fc11 (2009-9554)
2009-09-21 00:00:00
cvelist
cvelist
CVE-2009-3165
2022-10-03 16:23:55
debian
debian
[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection
2009-10-17 23:28:49
securityvulns
securityvulns
[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection
2009-10-19 00:00:00
prion
prion
Sql injection
2009-09-15 22:30:00
ubuntucve
ubuntucve
CVE-2009-3165
2009-09-15 00:00:00
cve
cve
CVE-2009-3165
2022-10-03 16:23:55
seebug
seebug
Mozilla Bugzilla Bug.create()和Bug.search()函数SQL注入漏洞
2009-09-16 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: bugzilla-3.2.5-1.fc11
2009-09-19 00:06:52
[SECURITY] Fedora 10 Update: bugzilla-3.2.5-1.fc10
2009-09-19 00:11:57
[SECURITY] Fedora 11 Update: bugzilla-3.2.6-2.fc11
2010-02-09 05:10:39
freebsd
freebsd
bugzilla -- two SQL injections, sensitive data exposure
2009-09-11 00:00:00
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2010-06-04 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.5%
Related for NVD:CVE-2009-3165