Lucene search
HistoryFeb 28, 2006 - 11:02 a.m.
CVE-2006-0913
cve-2006-0913
sql injection
bugzilla 2.17
bugzilla 2.18.4
bugzilla 2.20
remote authenticated users
administrative privileges
8.1 High
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
65.4%
SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.
Related
prion
prion
Sql injection
2006-02-28 11:02:00
ubuntucve
ubuntucve
CVE-2006-0913
2006-02-28 00:00:00
freebsd
freebsd
bugzilla -- multiple vulnerabilities
2006-02-20 00:00:00
nessus
nessus
openvas
openvas
FreeBSD Ports: bugzilla
2008-09-04 00:00:00
FreeBSD Ports: bugzilla
2008-09-04 00:00:00
8.1 High
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
65.4%
Related for CVE-2006-0913