CVE-2006-0915 - Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error

Back Back to CVE browser

HIGH

Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error

Published Feb 28, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.19%

Description

Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.vupen.com/english/advisories/2006/0692
vdb-entryx_refsource_VUPEN
https://bugzilla.mozilla.org/show_bug.cgi?id=313441
x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0919
Advisory

Link	Providers	Tags
http://www.vupen.com/english/advisories/2006/0692		vdb-entryx_refsource_VUPEN
https://bugzilla.mozilla.org/show_bug.cgi?id=313441		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0919		Advisory