CVE-2006-0914 - Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error

Back Back to CVE browser

MEDIUM

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error

Published Feb 28, 2006

5.5

MEDIUM

CVSS 2.0

EPSS 1.16%

Description

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (5)

http://www.securityfocus.com/archive/1/425584/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/0692
vdb-entryx_refsource_VUPEN
https://bugzilla.mozilla.org/show_bug.cgi?id=312498
x_refsource_CONFIRMExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0918
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42802
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/archive/1/425584/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/0692		vdb-entryx_refsource_VUPEN
https://bugzilla.mozilla.org/show_bug.cgi?id=312498		x_refsource_CONFIRMExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0918		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42802		vdb-entryx_refsource_XF