Lucene search

K
cvelistMitreCVELIST:CVE-2009-3165
HistorySep 15, 2009 - 10:00 p.m.

CVE-2009-3165

2009-09-1522:00:00
mitre
www.cve.org
6
sql injection
bugzilla
remote attackers
arbitrary commands

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

51.1%

SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

51.1%