Bugzilla@2.18.1 Security Vulnerabilities and Issues — Bugzilla@2.18.1 CVE List

Lucene search

MozillaBugzilla2.18.1

4 matches found

CVE•added 2006/10/23 5:7 p.m.•59 views

CVE-2006-5453

Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) page headers using the H1, H2, and H3 HTML tags in global/header...

3.5CVSS5.2AI score0.00828EPSS

CVE•added 2006/02/28 11:2 a.m.•44 views

CVE-2006-0913

SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.

5.5CVSS7.8AI score0.0082EPSS

CVE•added 2006/02/28 11:2 a.m.•42 views

CVE-2006-0914

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error.

5.5CVSS6.9AI score0.00757EPSS

CVE•added 2006/10/23 5:7 p.m.•38 views

CVE-2006-5454

Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadline field by viewing the XML format of the b...

5CVSS6.5AI score0.01146EPSS