CVE-2006-0914: Mozilla Bugzilla

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error.

Affected products

• Mozilla Bugzilla: version 2.16.10 only; version 2.17 only; version 2.17.4 only; version 2.17.5 only; version 2.17.6 only; version 2.17.7 only; …

Published 2006-02-28. Last modified 2026-06-16.