10

CVE-2002-1110

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mantis ≫ Mantis Version0.15.3
Mantis ≫ Mantis Version0.15.4
Mantis ≫ Mantis Version0.15.5
Mantis ≫ Mantis Version0.15.6
Mantis ≫ Mantis Version0.15.7
Mantis ≫ Mantis Version0.15.8
Mantis ≫ Mantis Version0.15.9
Mantis ≫ Mantis Version0.15.10
Mantis ≫ Mantis Version0.15.11
Mantis ≫ Mantis Version0.15.12
Mantis ≫ Mantis Version0.16.0
Mantis ≫ Mantis Version0.16.1
Mantis ≫ Mantis Version0.17.0
Mantis ≫ Mantis Version0.17.1
Mantis ≫ Mantis Version0.17.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.21% 0.803
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://mantisbt.sourceforge.net/advisories/2002/2002-01.txt
http://marc.info/?l=bugtraq&m=102978728718851&w=2
http://www.debian.org/security/2002/dsa-153
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9897.php
http://www.securityfocus.com/bid/5510
Patch
Vendor Advisory