exploitDog

GHSA-gggg-8p94-c53f

Опубликовано: 02 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2009-3125
https://bugzilla.mozilla.org/show_bug.cgi?id=515191
http://secunia.com/advisories/36718
http://www.bugzilla.org/security/3.0.8
http://www.securityfocus.com/bid/36371

EPSS

Процентиль: 70%

0.01393

Низкий

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2009-3125

ubuntu

почти 17 лет назад

SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

CVE-2009-3125

nvd

почти 17 лет назад

SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

CVE-2009-3125

debian

почти 17 лет назад

SQL injection vulnerability in the Bug.search WebService function in B ...

EPSS

Процентиль: 70%

0.01393

Низкий

CVE ID

Дефекты

CWE-89