high7.5
CVE-2005-3336
SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Impact
SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mantis | Mantis | Versions 0.19.2, 1.0.0_rc2 |
References
- NVD record
- CVE.org record
- http://bugs.mantisbt.org/changelog_page.php
- http://secunia.com/advisories/16506
- http://secunia.com/advisories/16818
- http://secunia.com/advisories/17362
- http://secunia.com/advisories/17654
- http://sourceforge.net/project/shownotes.php?release_id=362673
- http://www.debian.org/security/2005/dsa-905
- http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
- http://www.osvdb.org/20324
- http://www.securityfocus.com/bid/15227
- http://www.vupen.com/english/advisories/2005/2221
- http://bugs.mantisbt.org/changelog_page.php
- http://secunia.com/advisories/16506
- http://secunia.com/advisories/16818
- http://secunia.com/advisories/17362
- http://secunia.com/advisories/17654
- http://sourceforge.net/project/shownotes.php?release_id=362673
- http://www.debian.org/security/2005/dsa-905
- http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
- http://www.osvdb.org/20324
- http://www.securityfocus.com/bid/15227
- http://www.vupen.com/english/advisories/2005/2221