Sql injection

2006-02-2811:02:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%

JSON

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error.

CPENameOperatorVersion
bugzillaeq2.17.6
bugzillaeq2.20 rc2
bugzillaeq2.20 rc1
bugzillaeq2.18 rc1
bugzillaeq2.17.4
bugzillaeq2.18.1
bugzillaeq2.17.5
bugzillaeq2.18.4
bugzillaeq2.18
bugzillaeq2.18.3

Name	Operator	Version
bugzilla	eq	2.17.6
bugzilla	eq	2.20 rc2
bugzilla	eq	2.20 rc1
bugzilla	eq	2.18 rc1
bugzilla	eq	2.17.4
bugzilla	eq	2.18.1
bugzilla	eq	2.17.5
bugzilla	eq	2.18.4
bugzilla	eq	2.18
bugzilla	eq	2.18.3