SQL Injection Vulnerability in Mantis BT by Mantis Bug Tracker
CVE-2005-3336

Currently unrated

Key Information:

Vendor

Mantis

Status
Mantis
Vendor
CVE Published:
27 October 2005

What is CVE-2005-3336?

An SQL injection vulnerability exists in Mantis BT versions 1.0.0RC2 and 0.19.2, allowing remote attackers to execute arbitrary SQL commands. This presents significant security risks as it can lead to unauthorized data access and manipulation, compromising the integrity and confidentiality of the data managed by Mantis Bug Tracker.

References

http://bugs.mantisbt.org/changelog_page.php
x_refsource_CONFIRM
http://www.debian.org/security/2005/dsa-905
vendor-advisoryx_refsource_DEBIAN
http://sourceforge.net/project/shownotes.php?release_id=3...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.