mantis - several

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2005-4238 Public exploit

  Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attacker…

  Dec 14, 2005
• Unscored —
  CVE-2005-4518

  Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size …

  Dec 28, 2005
• Unscored —
  CVE-2005-4519

  Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier al…

  Dec 28, 2005
• Unscored —
  CVE-2005-4520

  Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack v…

  Dec 28, 2005
• Unscored —
  CVE-2005-4521

  CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct …

  Dec 28, 2005
• Unscored —
  CVE-2005-4522

  Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and …

  Dec 28, 2005
• Unscored —
  CVE-2005-4523

  Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensit…

  Dec 28, 2005
• Unscored —
  CVE-2005-4524

  Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and…

  Dec 28, 2005
• Unscored —
  CVE-2006-0840

  manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) cha…

  Feb 22, 2006