Back
CVE-2003-1043
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
Published: Aug 18, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (18)
| Vendor | Product | Version |
|---|---|---|
| mozilla | bugzilla | 2.4 |
| mozilla | bugzilla | 2.6 |
| mozilla | bugzilla | 2.8 |
| mozilla | bugzilla | 2.10 |
| mozilla | bugzilla | 2.12 |
| mozilla | bugzilla | 2.14 |
| mozilla | bugzilla | 2.14.1 |
| mozilla | bugzilla | 2.14.2 |
| mozilla | bugzilla | 2.14.3 |
| mozilla | bugzilla | 2.14.4 |
| mozilla | bugzilla | 2.14.5 |
| mozilla | bugzilla | 2.16 |
| mozilla | bugzilla | 2.16.1 |
| mozilla | bugzilla | 2.16.2 |
| mozilla | bugzilla | 2.16.3 |
| mozilla | bugzilla | 2.17.1 |
| mozilla | bugzilla | 2.17.3 |
| mozilla | bugzilla | 2.17.4 |
GitHub Security Advisory GHSA-qhrf-p8cc-9cxx
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows...
References (10)
- http://bugzilla.mozilla.org/show_bug.cgi?id=219044
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774 Vendor Advisory
- http://www.securityfocus.com/archive/1/343185
- http://www.securityfocus.com/bid/8953 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13596
- http://bugzilla.mozilla.org/show_bug.cgi?id=219044
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774 Vendor Advisory
- http://www.securityfocus.com/archive/1/343185
- http://www.securityfocus.com/bid/8953 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13596
Risk Scores
CVSS Score
10.0 / 10
EPSS Score
2.57%
Top 16% most likely to be exploited
Threat Score
40.8 / 100
Data Sources
NVD
EPSS
GitHub