Vulnerabilities > CVE-2003-1042 - Unspecified vulnerability in Mozilla Bugzilla

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
mozilla
nessus
NVD
Published: 2004-08-18
Updated: 2017-07-11

Summary

SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.

Vulnerable Configurations

Part Description Count
Application
Mozilla
18

Nessus

NASL familyCGI abuses
NASL idBUGZILLA_SQL_VULNS.NASL
descriptionAccording to its version number, the remote Bugzilla bug tracker is vulnerable to various flaws that could let a privileged user execute arbitrary SQL commands on this host, which could allow an attacker to obtain information about bugs marked as being confidential.
last seen2020-06-01
modified2020-06-02
plugin id11917
published2003-11-05
reporterThis script is Copyright (C) 2003-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/11917
titleBugzilla < 2.16.4 / 2.17.5 Multiple Vulnerabilities (SQLi, ID)

References