Description
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
Unscored
CVE-2004-0707
EUVD-2004-0706GHSA-wq8h-94wp-w9mg
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privil…
Published Jul 21, 2004 · Updated Aug 8, 2024 · Assigned by mitre