CVE-2006-0913

Description

SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24819

http://www.vupen.com/english/advisories/2006/0692

http://www.securityfocus.com/bid/16738

http://www.securityfocus.com/archive/1/425584/100/0/threaded

http://www.osvdb.org/23378

http://secunia.com/advisories/18979

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3