Secunia

Multiple vulnerabilities have been identified in Bugzilla allowing malicious users to inject SQL or view sensitive information.

1) A user with "editproducts" privileges can select arbitrary SQL queries, which will be executed by the cron job "collectstat.pl".

2) A user with "editkeywords" privileges can inject arbitrary SQL queries through the URL used to edit existing keywords.

3) Bug group memberships aren't properly deleted when a group is deleted. This allows previous members of that group to conduct administrative functions when a new group with the same ID is created.

4) It is possible to view the summary of a "secure" bug if an email address is supplied, which previously has been used to vote on the bug.

5) An unspecified vulnerability may allow users to view component descriptions for a product, which the user doesn't have access to.

The vulnerabilities have been reported in various versions prior to 2.17.5 and 2.16.4.

Solution
Versions 2.17.5 and 2.16.4 are not vulnerable.
Further details available in Customer Area

Provided and/or discovered by
Andrew Eross
Vlad Dascalu
Stefan Mayr
Bradley Baetz
Ryan Cleary

Changelog
Further details available in Customer Area

Original Advisory
http://bugzilla.mozilla.org/show_bug.cgi?id=214290
http://bugzilla.mozilla.org/show_bug.cgi?id=219044
http://bugzilla.mozilla.org/show_bug.cgi?id=219690
http://bugzilla.mozilla.org/show_bug.cgi?id=209376
http://bugzilla.mozilla.org/show_bug.cgi?id=209742

Deep Links
Links available in Customer Area