CyberSec.Space Logo
Back to CVE Browser

CVE-2003-1043

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0940%
EPSS Percentile30.05th
PublishedAug 18, 2004
Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.

Affected Platforms (CPE)

πŸ“¦
Mozilla

Bugzilla

= 2.4
πŸ“¦
Mozilla

Bugzilla

= 2.6
πŸ“¦
Mozilla

Bugzilla

= 2.8
πŸ“¦
Mozilla

Bugzilla

= 2.10
πŸ“¦
Mozilla

Bugzilla

= 2.12
πŸ“¦
Mozilla

Bugzilla

= 2.14
πŸ“¦
Mozilla

Bugzilla

= 2.14.1
πŸ“¦
Mozilla

Bugzilla

= 2.14.2
πŸ“¦
Mozilla

Bugzilla

= 2.14.3
πŸ“¦
Mozilla

Bugzilla

= 2.14.4
πŸ“¦
Mozilla

Bugzilla

= 2.14.5
πŸ“¦
Mozilla

Bugzilla

= 2.16
πŸ“¦
Mozilla

Bugzilla

= 2.16.1
πŸ“¦
Mozilla

Bugzilla

= 2.16.2
πŸ“¦
Mozilla

Bugzilla

= 2.16.3
πŸ“¦
Mozilla

Bugzilla

= 2.17.1
πŸ“¦
Mozilla

Bugzilla

= 2.17.3
πŸ“¦
Mozilla

Bugzilla

= 2.17.4

References & Advisories

Related Vulnerabilities