{"id":"CVE-2006-0913","aliases":["EUVD-2006-0917","GHSA-46fm-qcpg-4p27"],"status":"published","title":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows...","description":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.","severity":{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01042,"percentile":0.64308,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-02-28T11:00:00Z","modified":"2026-06-16T22:21:33Z","products":[{"vendor":"mozilla","product":"bugzilla"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24819","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/18979","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/0692","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=312498","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/425584/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/16738","tags":["vdb-entry","x_refsource_BID","x_transferred","Vendor Advisory"]},{"url":"http://www.osvdb.org/23378","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0913"},{"url":"https://github.com/advisories/GHSA-46fm-qcpg-4p27"}],"sources":{"cve":[{"id":"CVE-2006-0913","description":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.","status":"published","published":"2006-02-28T11:00:00Z","modified":"2024-08-07T16:48:57.01Z","updated_at":"2026-11-02T14:33:52.569914Z"}],"euvd":[{"id":"EUVD-2006-0917","description":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.","status":"published","published":"2006-02-28T11:00:00Z","modified":"2024-08-07T16:48:57Z","updated_at":"2026-11-03T01:16:07.154815Z"}],"ghsa":[{"id":"GHSA-46fm-qcpg-4p27","title":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows...","description":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.","status":"published","published":"2022-05-01T06:43:49Z","modified":"2023-01-31T05:00:44Z","updated_at":"2026-11-02T14:47:55.156502Z"}],"nvd":[{"id":"CVE-2006-0913","description":"SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi.","status":"published","published":"2006-02-28T11:02:00Z","modified":"2026-06-16T22:21:33.073Z","cvss":[{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:00.920802Z"}]}}