Vulnerability Details CVE-2003-1042
SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=214290
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
- http://www.securityfocus.com/archive/1/343185
- http://www.securityfocus.com/bid/8953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13594
- http://bugzilla.mozilla.org/show_bug.cgi?id=214290
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
- http://www.securityfocus.com/archive/1/343185
- http://www.securityfocus.com/bid/8953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13594
Products affected by CVE-2003-1042
-
cpe:2.3:a:mozilla:bugzilla:2.10
-
cpe:2.3:a:mozilla:bugzilla:2.12
-
cpe:2.3:a:mozilla:bugzilla:2.14
-
cpe:2.3:a:mozilla:bugzilla:2.14.1
-
cpe:2.3:a:mozilla:bugzilla:2.14.2
-
cpe:2.3:a:mozilla:bugzilla:2.14.3
-
cpe:2.3:a:mozilla:bugzilla:2.14.4
-
cpe:2.3:a:mozilla:bugzilla:2.14.5
-
cpe:2.3:a:mozilla:bugzilla:2.16
-
cpe:2.3:a:mozilla:bugzilla:2.16.1
-
cpe:2.3:a:mozilla:bugzilla:2.16.2
-
cpe:2.3:a:mozilla:bugzilla:2.16.3
-
cpe:2.3:a:mozilla:bugzilla:2.17.1
-
cpe:2.3:a:mozilla:bugzilla:2.17.3
-
cpe:2.3:a:mozilla:bugzilla:2.17.4
-
cpe:2.3:a:mozilla:bugzilla:2.4
-
cpe:2.3:a:mozilla:bugzilla:2.6
-
cpe:2.3:a:mozilla:bugzilla:2.8