Description
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
References
- 20031103 [BUGZILLA] Security Advisory - SQL injection, information leak mailing-list
- CLA-2003:774 vendor-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=219044
- bugzilla-url-sql-injection(13596) vdb-entry
- 8953 vdb-entry