high7.5
CVE-2002-1198
Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbi…
Impact
Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Bugzilla | Versions 2.14, 2.14.1, 2.14.2, 2.14.3, 2.14.4, 2.16 |
References
- NVD record
- CVE.org record
- http://bugzilla.mozilla.org/show_bug.cgi?id=165221
- http://marc.info/?l=bugtraq&m=103349804226566&w=2
- http://www.iss.net/security_center/static/10235.php
- http://www.securityfocus.com/bid/5842
- http://bugzilla.mozilla.org/show_bug.cgi?id=165221
- http://marc.info/?l=bugtraq&m=103349804226566&w=2
- http://www.iss.net/security_center/static/10235.php
- http://www.securityfocus.com/bid/5842