cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
Max CVSS
5.0
EPSS Score
0.44%
Published
2005-12-28
Updated
2011-03-08
Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view_type and (2) target_field parameters.
Max CVSS
4.3
EPSS Score
0.98%
Published
2005-12-28
Updated
2011-03-08
Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear whether this is a duplicate of another CVE.
Max CVSS
5.0
EPSS Score
0.75%
Published
2005-12-28
Updated
2011-03-08
Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php.
Max CVSS
7.5
EPSS Score
1.54%
Published
2005-12-28
Updated
2011-03-08
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
Max CVSS
4.3
EPSS Score
0.53%
Published
2005-12-14
Updated
2011-03-08
5 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!