Summary
Detail | |||
---|---|---|---|
Vendor | Mantis | First view | 2004-08-20 |
Product | Mantis | Last view | 2008-10-22 |
Version | 0.12 | Type | Application |
Update | * | ||
Edition | * | ||
Language | * | ||
Sofware Edition | * | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:a:mantis:mantis |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
7.5 | 2008-10-22 | CVE-2008-4689 | Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions. |
5 | 2008-10-22 | CVE-2008-4688 | core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number. |
9 | 2008-10-22 | CVE-2008-4687 | manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php. |
7.5 | 2008-07-27 | CVE-2008-3333 | Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php). |
6.5 | 2008-07-27 | CVE-2008-3332 | Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter. |
3.5 | 2008-07-27 | CVE-2008-3331 | Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter. |
4.3 | 2008-01-23 | CVE-2008-0404 | Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary. |
4.3 | 2008-01-03 | CVE-2007-6611 | Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php. |
5 | 2006-12-15 | CVE-2006-6574 | Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field. |
10 | 2006-12-13 | CVE-2006-6515 | Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders. |
4.3 | 2006-02-21 | CVE-2006-0841 | Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide_status, (2) handler_id, (3) user_monitor, (4) reporter_id, (5) view_type, (6) show_severity, (7) show_category, (8) show_status, (9) show_resolution, (10) show_build, (11) show_profile, (12) show_priority, (13) highlight_changed, (14) relationship_type, and (15) relationship_bug parameters in (a) view_all_set.php; the (16) sort parameter in (b) manage_user_page.php; the (17) view_type parameter in (c) view_filters_page.php; and the (18) title parameter in (d) proj_doc_delete.php. NOTE: item 17 might be subsumed by CVE-2005-4522. |
5 | 2006-02-21 | CVE-2006-0840 | manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519. |
5 | 2005-12-27 | CVE-2005-4523 | Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information. |
7.5 | 2005-12-27 | CVE-2005-4519 | Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php. |
4.3 | 2005-12-14 | CVE-2005-4238 | Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter. |
5 | 2004-12-31 | CVE-2004-2666 | Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page. |
4.3 | 2004-12-31 | CVE-2004-1730 | Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_set.php. |
5 | 2004-08-20 | CVE-2004-1731 | signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address. |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
37% (3) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
25% (2) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
12% (1) | CWE-287 | Improper Authentication |
12% (1) | CWE-200 | Information Exposure |
12% (1) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
Open Source Vulnerability Database (OSVDB)
id | Description |
---|---|
49478 | Mantis Cookie Session Hijacking |
49477 | Mantis core/string_api.php Modified Issue Number Remote Information Disclosure |
49157 | Mantis manage_proj_page.php sort Parameter Arbitrary PHP Code Execution |
47854 | Mantis adm_config_set.php value Variable Arbitrary Remote Code Execution |
47176 | Mantis return_dynamic_filters.php filter_target Parameter XSS |
47175 | Mantis account_prefs_update.php language Parameter Traversal Local File Inclu... |
40530 | Mantis Most Active Bugs Summary Page XSS |
39873 | Mantis view.php Filename XSS |
37108 | Mantis $g_bug_reminder_threshold Reporter Privilege Escalation |
35979 | Mantis view_history_threshold Bug History Disclosure |
32195 | Mantis Issue History Custom Field Information Disclosure |
28626 | Mantis manage_user_page.php sort Parameter SQL Injection DoS |
23248 | Mantis view_all_set.php Multiple Parameter XSS |
22487 | Mantis manage_user_page.php sort Parameter XSS |
22057 | Mantis Public RSS Feed Private Bug Disclosure |
22052 | Mantis view_all_set.php sort Parameter SQL Injection |
22051 | Mantis manage_user_page.php Multiple Parameter SQL Injection |
21686 | Mantis view_filters_page.php target_field Parameter XSS |
9090 | Mantis signup_page.php Arbitrary Mail Relay |
9089 | Mantis view_all_set.php hide_status Parameter XSS |
9088 | Mantis login_select_proj_page.php onclick Parameter XSS |
9087 | Mantis signup.php Email Address Field XSS |
9086 | Mantis login_page.php return Parameter XSS |
OpenVAS Exploits
id | Description |
---|---|
2009-02-17 | Name : Fedora Update for mantis FEDORA-2008-0282 File : nvt/gb_fedora_2008_0282_mantis_fc7.nasl |
2009-02-17 | Name : Fedora Update for mantis FEDORA-2008-0353 File : nvt/gb_fedora_2008_0353_mantis_fc8.nasl |
2009-02-17 | Name : Fedora Update for mantis FEDORA-2008-0796 File : nvt/gb_fedora_2008_0796_mantis_fc7.nasl |
2009-02-17 | Name : Fedora Update for mantis FEDORA-2008-0856 File : nvt/gb_fedora_2008_0856_mantis_fc8.nasl |
2008-12-10 | Name : FreeBSD Ports: mantis File : nvt/freebsd_mantis3.nasl |
2008-12-10 | Name : FreeBSD Ports: mantis File : nvt/freebsd_mantis4.nasl |
2008-12-03 | Name : Gentoo Security Advisory GLSA 200812-07 (mantisbt) File : nvt/glsa_200812_07.nasl |
2008-09-24 | Name : Gentoo Security Advisory GLSA 200512-12 (Mantis) File : nvt/glsa_200512_12.nasl |
2008-09-24 | Name : Gentoo Security Advisory GLSA 200803-04 (mantis) File : nvt/glsa_200803_04.nasl |
2008-09-24 | Name : Gentoo Security Advisory GLSA 200809-10 (mantisbt) File : nvt/glsa_200809_10.nasl |
2008-09-04 | Name : FreeBSD Ports: mantis File : nvt/freebsd_mantis0.nasl |
2008-09-04 | Name : FreeBSD Ports: mantis File : nvt/freebsd_mantis1.nasl |
2008-01-31 | Name : Debian Security Advisory DSA 1467-1 (mantis) File : nvt/deb_1467_1.nasl |
2008-01-17 | Name : Debian Security Advisory DSA 1133-1 (mantis) File : nvt/deb_1133_1.nasl |
2008-01-17 | Name : Debian Security Advisory DSA 944-1 (mantis) File : nvt/deb_944_1.nasl |
Nessus® Vulnerability Scanner
id | Description |
---|---|
2008-12-08 | Name: The remote FreeBSD host is missing a security-related update. File: freebsd_pkg_29255141c3df11dda7210030843d3802.nasl - Type: ACT_GATHER_INFO |
2008-12-08 | Name: The remote FreeBSD host is missing a security-related update. File: freebsd_pkg_af2745c0c3e011dda7210030843d3802.nasl - Type: ACT_GATHER_INFO |
2008-12-03 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-200812-07.nasl - Type: ACT_GATHER_INFO |
2008-09-22 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-200809-10.nasl - Type: ACT_GATHER_INFO |
2008-03-07 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-200803-04.nasl - Type: ACT_GATHER_INFO |
2008-01-27 | Name: The remote Fedora host is missing a security update. File: fedora_2008-0796.nasl - Type: ACT_GATHER_INFO |
2008-01-27 | Name: The remote Fedora host is missing a security update. File: fedora_2008-0856.nasl - Type: ACT_GATHER_INFO |
2008-01-21 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-1467.nasl - Type: ACT_GATHER_INFO |
2008-01-07 | Name: The remote Fedora host is missing a security update. File: fedora_2008-0282.nasl - Type: ACT_GATHER_INFO |
2008-01-07 | Name: The remote Fedora host is missing a security update. File: fedora_2008-0353.nasl - Type: ACT_GATHER_INFO |
2006-10-14 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-1133.nasl - Type: ACT_GATHER_INFO |
2006-10-14 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-944.nasl - Type: ACT_GATHER_INFO |
2006-05-13 | Name: The remote FreeBSD host is missing a security-related update. File: freebsd_pkg_592815da9eed11dab410000e0c2e438a.nasl - Type: ACT_GATHER_INFO |
2006-05-13 | Name: The remote FreeBSD host is missing a security-related update. File: freebsd_pkg_6e3b12e26ce311dab90c000e0c2e438a.nasl - Type: ACT_GATHER_INFO |
2005-12-30 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-200512-12.nasl - Type: ACT_GATHER_INFO |
2004-08-22 | Name: The remote web server contains a PHP application that is affected by multiple... File: mantis_multiple_vulns2.nasl - Type: ACT_GATHER_INFO |