← Database

CVE-2003-1042

CRITICAL CVSS: 10.0 Published: 2004-08-18 Modified: 2026-06-16

Description

SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References