| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4523 | 5.0 |
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4524 | 5.0 |
Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4522 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view_type and (2) target_field parameters.
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4521 | 5.0 |
CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_test.php and (2) ref parameter in login_select_proj_pa
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4520 | 5.0 |
Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear wh
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 | |
| CVE-2005-4519 | 7.5 |
Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_u
|
08-03-2011 - 02:28 | 28-12-2005 - 01:03 |