← Database

CVE-2003-1043

CRITICAL CVSS: 10.0 Published: 2004-08-18 Modified: 2026-06-16

Description

SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References