← Database

CVE-2006-0915

HIGH CVSS: 7.5 Published: 2006-02-28 Modified: 2026-06-16

Description

Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error.

Affected Platforms

Mozilla Bugzilla

Weakness Type

NVD-CWE-Other

References