Vulnerability Details CVE-2003-1043
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.8%
CVSS Severity
CVSS v2 Score 10.0
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=219044
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
- http://www.securityfocus.com/archive/1/343185
- http://www.securityfocus.com/bid/8953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13596
- http://bugzilla.mozilla.org/show_bug.cgi?id=219044
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
- http://www.securityfocus.com/archive/1/343185
- http://www.securityfocus.com/bid/8953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13596
Products affected by CVE-2003-1043
-
cpe:2.3:a:mozilla:bugzilla:2.10
-
cpe:2.3:a:mozilla:bugzilla:2.12
-
cpe:2.3:a:mozilla:bugzilla:2.14
-
cpe:2.3:a:mozilla:bugzilla:2.14.1
-
cpe:2.3:a:mozilla:bugzilla:2.14.2
-
cpe:2.3:a:mozilla:bugzilla:2.14.3
-
cpe:2.3:a:mozilla:bugzilla:2.14.4
-
cpe:2.3:a:mozilla:bugzilla:2.14.5
-
cpe:2.3:a:mozilla:bugzilla:2.16
-
cpe:2.3:a:mozilla:bugzilla:2.16.1
-
cpe:2.3:a:mozilla:bugzilla:2.16.2
-
cpe:2.3:a:mozilla:bugzilla:2.16.3
-
cpe:2.3:a:mozilla:bugzilla:2.17.1
-
cpe:2.3:a:mozilla:bugzilla:2.17.3
-
cpe:2.3:a:mozilla:bugzilla:2.17.4
-
cpe:2.3:a:mozilla:bugzilla:2.4
-
cpe:2.3:a:mozilla:bugzilla:2.6
-
cpe:2.3:a:mozilla:bugzilla:2.8