Unscored CVE-2006-0914 EUVD-2006-0918GHSA-4cjg-mq5r-j9q6

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicate…

Published Feb 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error.

References

ADV-2006-0692 vdb-entry
bugzilla-duplicates-sql-injection(42802) vdb-entry
https://bugzilla.mozilla.org/show_bug.cgi?id=312498
20060221 [BUGZILLA] Security Advisory for Bugzilla 2.20, 2.21.1, and 2.18.4 mailing-list