Skip to content
OpenAdvisories
Unscored DSA-905-1 5 CVEs

mantis - several

Published Nov 22, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 mantis 0.19.2-4.1

Vulnerabilities 5

  • Unscored —
    CVE-2005-3091

    Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2005-3335

    PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attac…

  • Unscored —
    CVE-2005-3336

    SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3338

    Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addres…

  • Unscored —
    CVE-2005-3339

    Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.