CVE-2003-1045

votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter.

• http://bugzilla.mozilla.org/show_bug.cgi?id=209376Patch, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
• http://www.securityfocus.com/archive/1/343185
• http://www.securityfocus.com/bid/8953Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13600
• http://bugzilla.mozilla.org/show_bug.cgi?id=209376Patch, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
• http://www.securityfocus.com/archive/1/343185
• http://www.securityfocus.com/bid/8953Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13600

Published

Aug 18, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-1039Multiple buffer overflows in the mySAP.com architecture for …
• CVE-2003-1040kmod in the Linux kernel does not set its uid, suid, gid, or…
• CVE-2003-1041Internet Explorer 5.x and 6.0 allows remote attackers to exe…
• CVE-2003-1042SQL injection vulnerability in collectstats.pl for Bugzilla …
• CVE-2003-1043SQL injection vulnerability in Bugzilla 2.16.3 and earlier, …
• CVE-2003-1044editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebug…
• CVE-2003-1046describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does no…
• CVE-2003-1047Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-1048Double free vulnerability in mshtml.dll for certain versions…7.8
• CVE-2003-1049IBM DB2 Universal Database 7 before FixPak 12 creates certai…
• CVE-2003-1050Multiple buffer overflows in IBM DB2 Universal Database 8.1 …
• CVE-2003-1051Multiple format string vulnerabilities in IBM DB2 Universal …