← Database

CVE-2004-0707

HIGH CVSS: 7.5 Published: 2004-07-27 Modified: 2026-06-16

Description

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References