Unscored DSA-1467-1 2 CVEs

mantis - several vulnerabilities

Published Jan 19, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	mantis	0.19.2-5sarge5

Vulnerabilities 2

Unscored —

CVE-2006-6574

Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote a…

Dec 15, 2006
Unscored —

CVE-2007-6611

Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary…

Jan 3, 2008