CVE-2006-0913

Опубликовано: 28 фев. 2006

Источник: nvd

CVSS2: 5.5

EPSS Низкий

Описание

SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.

Ссылки

http://secunia.com/advisories/18979
Vendor Advisory
http://www.osvdb.org/23378
http://www.securityfocus.com/archive/1/425584/100/0/threaded
http://www.securityfocus.com/bid/16738
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0692
https://bugzilla.mozilla.org/show_bug.cgi?id=312498
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24819
http://secunia.com/advisories/18979
Vendor Advisory
http://www.osvdb.org/23378
http://www.securityfocus.com/archive/1/425584/100/0/threaded
http://www.securityfocus.com/bid/16738
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0692
https://bugzilla.mozilla.org/show_bug.cgi?id=312498
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24819

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.21.1:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.0082

Низкий

5.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-0913

ubuntu

больше 19 лет назад

CVE-2006-0913

debian

больше 19 лет назад

SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through ...

GHSA-46fm-qcpg-4p27

github

больше 3 лет назад

EPSS

Процентиль: 73%

0.0082

Низкий

5.5 Medium

CVSS2

Дефекты

NVD-CWE-Other