1 files changed, 1 insertions, 0 deletions
diff --git a/long_list.cgi b/long_list.cgi
index 0cde1e93a..63120e5eb 100755
--- a/long_list.cgi
+++ b/long_list.cgi
@@ -73,6 +73,7 @@ where assign.userid = bugs.assigned_to and report.userid = bugs.reporter and";
 
 $::FORM{'buglist'} = "" unless exists $::FORM{'buglist'};
 foreach my $bug (split(/:/, $::FORM{'buglist'})) {
+    if (!detaint_natural($bug)) || next;
     SendSQL(SelectVisible("$generic_query bugs.bug_id = $bug",
                           $::userid, $::usergroupset));