Unscored DSA-778-1 2 CVEs

mantis - missing input sanitising

Published Aug 19, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	mantis	0.19.2-4

Vulnerabilities 2

Unscored —

CVE-2005-2556

core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to con…

Aug 24, 2005
Unscored —

CVE-2005-2557 Public exploit

Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers…

Sep 28, 2005