CVE		CVE-2009-3165
Статус		Candidate
Описание		SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
Важность		High
CVSS score		7,5
CVSS vector		(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Phase		Assigned (16.09.2009)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3165
References		BID : 36373
		CONFIRM : http://www.bugzilla.org/security/3.0.8/
		CONFIRM : https://bugzilla.mozilla.org/show_bug.cgi?id=515191
		SECUNIA : 36718