Description (CNA)
SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24819
- http://secunia.com/advisories/18979
- http://www.vupen.com/english/advisories/2006/0692
- https://bugzilla.mozilla.org/show_bug.cgi?id=312498
- http://www.securityfocus.com/archive/1/425584/100/0/threaded
- http://www.securityfocus.com/bid/16738
- http://www.osvdb.org/23378
ADP enrichment
No English description supplied.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24819
- http://secunia.com/advisories/18979
- http://www.vupen.com/english/advisories/2006/0692
- https://bugzilla.mozilla.org/show_bug.cgi?id=312498
- http://www.securityfocus.com/archive/1/425584/100/0/threaded
- http://www.securityfocus.com/bid/16738
- http://www.osvdb.org/23378