SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=312498 | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/bid/16738 | Vendor Advisory |
http://secunia.com/advisories/18979 | Vendor Advisory |
http://www.osvdb.org/23378 | |
http://www.vupen.com/english/advisories/2006/0692 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/24819 | |
http://www.securityfocus.com/archive/1/425584/100/0/threaded |
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-02-28 03:02
Updated : 2018-10-18 09:29
NVD link : CVE-2006-0913
Mitre link : CVE-2006-0913
JSON object : View
CWE
Products Affected
mozilla
- bugzilla