CVE-2002-1198: Mozilla Bugzilla

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack.

Affected products

• Mozilla Bugzilla: version 2.14 only; version 2.14.1 only; version 2.14.2 only; version 2.14.3 only; version 2.14.4 only; version 2.16 only

Published 2002-10-28. Last modified 2026-06-16.