CVE-2004-0707

Published: Jul 27, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

Affected (24)

Products: Mozilla: Bugzilla

Mozilla

1 product

Bugzilla

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Version 2.10
Mozilla Bugzilla	Version 2.12
Mozilla Bugzilla	Version 2.14.1
Mozilla Bugzilla	Version 2.14.2
Mozilla Bugzilla	Version 2.14.3
Mozilla Bugzilla	Version 2.14.4
Mozilla Bugzilla	Version 2.14.5
Mozilla Bugzilla	Version 2.14
Mozilla Bugzilla	Version 2.16.1
Mozilla Bugzilla	Version 2.16.2
Mozilla Bugzilla	Version 2.16.3
Mozilla Bugzilla	Version 2.16.4
Mozilla Bugzilla	Version 2.16.5
Mozilla Bugzilla	Version 2.16
Mozilla Bugzilla	Version 2.17.1
Mozilla Bugzilla	Version 2.17.3
Mozilla Bugzilla	Version 2.17.4
Mozilla Bugzilla	Version 2.17.5
Mozilla Bugzilla	Version 2.17.6
Mozilla Bugzilla	Version 2.17.7
Mozilla Bugzilla	Version 2.17
Mozilla Bugzilla	Version 2.4
Mozilla Bugzilla	Version 2.6
Mozilla Bugzilla	Version 2.8