PT-2005-4146 · Mantis · Mantis

Published 2005-10-27 · Updated 2011-03-08 · CVE-2005-3336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mantis versions 0.19.2 through 1.0.0RC2

Description The issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For versions 0.19.2 through 1.0.0RC2, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3336

DSA-905-1

Affected Products

Mantis

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2005-3336 · Security Note
• http://secunia.com/advisories/16818 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200510-24.xml · Vendor Advisory
• http://debian.org/security/2005/dsa-905 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=362673 · Note
• http://secunia.com/advisories/17362 · Note
• http://bugs.mantisbt.org/changelog_page.php · Note
• http://secunia.com/advisories/16506 · Note
• http://osvdb.org/20324 · Note
• http://securityfocus.com/bid/15227 · Note
• http://vupen.com/english/advisories/2005/2221 · Note
• http://secunia.com/advisories/17654 · Note