NVD

Id
59641  
Name
CVE-2006-0914  
Description
Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-02-28  
Modified Date
2011-03-07  
Seq
2006-0914  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
306789 59641 CVE-2006-0914 20060221 [BUGZILLA] Security Advisory for Bugzilla 2.20, 2.21.1, and 2.18.4  View
306790 59641 CVE-2006-0914 ADV-2006-0692  View
306791 59641 CVE-2006-0914 bugzilla-duplicates-sql-injection(42802)  View
306792 59641 CVE-2006-0914 https://bugzilla.mozilla.org/show_bug.cgi?id=312498  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61623 JVNDB-2006-003889 Bugzilla における SQL エラーを誘発される脆弱性 Bugzilla には、SQL エラーを誘発される脆弱性が存在します。 CVE-2006-0914 17016 CVE-2006-0914 59641 5.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003889.html 2006-02-28 2014-03-11 View