CVE

Id
7867  
CVE No.
CVE-2003-1043  
Status
Candidate  
Description
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.  
Phase
Assigned (20040527)  
Votes
None (candidate not yet proposed)  
Comments