Vulnerabilities > Mantis
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-12-28 | CVE-2005-4520 | Unspecified vulnerability in Mantis Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. | 5.0 |
| 2005-12-28 | CVE-2005-4519 | Unspecified vulnerability in Mantis Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php. | 7.5 |
| 2005-12-28 | CVE-2005-4518 | Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter to (1) bug_file_add.php, (2) bug_report.php, (3) bug_report_advanced_page.php, and (4) proj_doc_add_page.php. | 7.5 |
| 2005-12-14 | CVE-2005-4238 | Cross-Site Scripting vulnerability in Mantis View_filters_page.PHP Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter. network mantis | 4.3 |
| 2005-10-27 | CVE-2005-3339 | Remote vulnerability in Mantis Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors. | 7.2 |
| 2005-10-27 | CVE-2005-3338 | Remote vulnerability in Mantis Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users. | 5.0 |
| 2005-10-27 | CVE-2005-3337 | Cross-Site Scripting vulnerability in Mantis Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php. network mantis | 4.3 |
| 2005-10-27 | CVE-2005-3336 | Remote vulnerability in Mantis 0.19.2/1.0.0Rc2 SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors. | 7.5 |
| 2005-10-27 | CVE-2005-3335 | Unspecified vulnerability in Mantis 0.19.2/1.0.0Rc2 PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter. | 7.5 |
| 2005-09-28 | CVE-2005-3091 | Remote vulnerability in Mantis Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp". network mantis | 4.3 |