CVE-2003-1043

SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi...

CVE-2003-1043

CVE-2003-1043 : The vulnerability affects Bugzilla versions 2.16.3 and earlier, and 2.17.1–2.17.4, where remote authenticated users with editkeywords privileges can obtain arbitrary SQL through the id parameter to editkeywords.cgi. The issue is a SQL injection in Bugzilla’s editing keywords flow,...