Vulnerability Details CVE-2006-0913
SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 58.8%
CVSS Severity
CVSS v2 Score 5.5
References
- http://secunia.com/advisories/18979
- http://www.osvdb.org/23378
- http://www.securityfocus.com/archive/1/425584/100/0/threaded
- http://www.securityfocus.com/bid/16738
- http://www.vupen.com/english/advisories/2006/0692
- https://bugzilla.mozilla.org/show_bug.cgi?id=312498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24819
- http://secunia.com/advisories/18979
- http://www.osvdb.org/23378
- http://www.securityfocus.com/archive/1/425584/100/0/threaded
- http://www.securityfocus.com/bid/16738
- http://www.vupen.com/english/advisories/2006/0692
- https://bugzilla.mozilla.org/show_bug.cgi?id=312498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24819
Products affected by CVE-2006-0913
-
cpe:2.3:a:mozilla:bugzilla:2.17.1
-
cpe:2.3:a:mozilla:bugzilla:2.17.3
-
cpe:2.3:a:mozilla:bugzilla:2.17.4
-
cpe:2.3:a:mozilla:bugzilla:2.17.5
-
cpe:2.3:a:mozilla:bugzilla:2.17.6
-
cpe:2.3:a:mozilla:bugzilla:2.17.7
-
cpe:2.3:a:mozilla:bugzilla:2.18
-
cpe:2.3:a:mozilla:bugzilla:2.18.1
-
cpe:2.3:a:mozilla:bugzilla:2.18.2
-
cpe:2.3:a:mozilla:bugzilla:2.18.3
-
cpe:2.3:a:mozilla:bugzilla:2.18.4
-
cpe:2.3:a:mozilla:bugzilla:2.19
-
cpe:2.3:a:mozilla:bugzilla:2.19.1
-
cpe:2.3:a:mozilla:bugzilla:2.19.2
-
cpe:2.3:a:mozilla:bugzilla:2.19.3
-
cpe:2.3:a:mozilla:bugzilla:2.20
-
cpe:2.3:a:mozilla:bugzilla:2.21
-
cpe:2.3:a:mozilla:bugzilla:2.21.1