Multiple vulnerabilities in bugzilla
| Package(s): | bugzilla | CVE #(s): | |||||
| Created: | October 2, 2002 | Updated: | October 9, 2002 | ||||
| Description: | The Bugzilla bug tracking system (versions prior to 2.14.4 or 2.16.1) suffers from a number of vulnerablities, including one which could result in remote command and SQL injection. An upgrade to 2.16.1 is recommended, since the 2.14 branch will be unmaintained after the end of the year. See the Bugzilla advisory for details. | ||||||
| Alerts: |
| ||||||
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.