Mantis

Mantis

43 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2005-4519

Exploit
  • EPSS 2.14%
  • Veröffentlicht 28.12.2005 01:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_u...

4.3

CVE-2005-4238

Exploit
  • EPSS 4.25%
  • Veröffentlicht 14.12.2005 11:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.

7.2

CVE-2005-3339

  • EPSS 0.07%
  • Veröffentlicht 27.10.2005 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.

5

CVE-2005-3338

  • EPSS 0.59%
  • Veröffentlicht 27.10.2005 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.

4.3

CVE-2005-3337

  • EPSS 0.43%
  • Veröffentlicht 27.10.2005 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php.

7.5

CVE-2005-3336

  • EPSS 1.34%
  • Veröffentlicht 27.10.2005 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

7.5

CVE-2005-3335

Exploit
  • EPSS 6.97%
  • Veröffentlicht 27.10.2005 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.

4.3

CVE-2005-3091

  • EPSS 0.43%
  • Veröffentlicht 28.09.2005 22:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".

4.3

CVE-2005-3090

  • EPSS 0.3%
  • Veröffentlicht 28.09.2005 22:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used ...

4.3

CVE-2005-2557

Exploit
  • EPSS 8.43%
  • Veröffentlicht 28.09.2005 21:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE...