CVE-2005-3335

Description

References

• bugs.mantisbt.org/changelog_page.php · Patch
• secunia.com/advisories/16506
• secunia.com/advisories/16818 · Exploit
• secunia.com/advisories/17362
• secunia.com/advisories/17654
• secunia.com/secunia_research/2005-46/advisory · Exploit
• securityreason.com/securityalert/121
• securitytracker.com/id
• debian.org/security/2005/dsa-905
• gentoo.org/security/en/glsa/glsa-200510-24.xml
• securityfocus.com/bid/15212
• securityfocus.com/bid/15227
• vupen.com/english/advisories/2005/2221
• exchange.xforce.ibmcloud.com/vulnerabilities/22886

Autres vulnérabilités de mantis

• CVE-2008-4689ÉLEVÉE 7.5Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.
• CVE-2008-4688MOYENNE 5.0core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source…
• CVE-2008-4687CRITIQUE 9.0manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP …
• CVE-2008-3333ÉLEVÉE 7.5Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files…
• CVE-2008-3332MOYENNE 6.5Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary co…