← Database

CVE-2006-0913

MEDIUM CVSS: 5.5 Published: 2006-02-28 Modified: 2026-06-16

Description

SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References