| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4523 | 5.0 |
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4524 | 5.0 |
Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4522 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view_type and (2) target_field parameters.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4521 | 5.0 |
CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_test.php and (2) ref parameter in login_select_proj_pa
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4520 | 5.0 |
Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear wh
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4519 | 7.5 |
Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_u
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4518 | 7.5 |
Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter to (1) bug_file_add.php, (2) bug_report.php, (3) bug_report_advanced_page.php, and (4) proj_doc_add_page.php.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4238 | 4.3 |
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
|
08-03-2011 - 02:27 | 14-12-2005 - 11:03 |