Unscored CVE-2006-0915 EUVD-2006-0919GHSA-g6qc-mg88-cfqg

Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi…

Published Feb 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error.

References

ADV-2006-0692 vdb-entry
https://bugzilla.mozilla.org/show_bug.cgi?id=313441