| Package | Affected versions | Patched versions |
|---|---|---|
| bugzilla | = 2.10= 2.12= 2.14= 2.14.1= 2.14.2= 2.14.3= 2.14.4= 2.14.5= 2.16= 2.16.1= 2.16.2= 2.16.3= 2.17.1= 2.17.3= 2.17.4= 2.4= 2.6= 2.8 |
SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free