5
CVSSv2

CVE-2005-4523

Published: 28/12/2005 Updated: 08/03/2011
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Mantis 1.0.0rc3 and previous versions discloses private bugs via public RSS feeds, which allows remote malicious users to obtain sensitive information.

Vulnerable Product Search on Vulmon Subscribe to Product

mantis mantis 0.10

mantis mantis 0.10.1

mantis mantis 0.14

mantis mantis 0.14.1

mantis mantis 0.15

mantis mantis 0.15.1

mantis mantis 0.15.5

mantis mantis 0.15.6

mantis mantis 0.17

mantis mantis 0.17.0

mantis mantis 0.18.0_rc1

mantis mantis 0.18.0a2

mantis mantis 0.19.0_rc1

mantis mantis 0.19.0a

mantis mantis 0.9.1

mantis mantis 1.0.0_rc1

mantis mantis 0.10.2

mantis mantis 0.11

mantis mantis 0.14.2

mantis mantis 0.14.3

mantis mantis 0.15.10

mantis mantis 0.15.11

mantis mantis 0.15.7

mantis mantis 0.15.8

mantis mantis 0.17.1

mantis mantis 0.17.2

mantis mantis 0.18.0a3

mantis mantis 0.18.0a4

mantis mantis 0.19.0a1

mantis mantis 0.19.0a2

mantis mantis 1.0.0_rc2

mantis mantis 1.0.0a1

mantis mantis 0.11.1

mantis mantis 0.12

mantis mantis 0.14.4

mantis mantis 0.14.5

mantis mantis 0.15.12

mantis mantis 0.15.2

mantis mantis 0.15.9

mantis mantis 0.16

mantis mantis 0.17.3

mantis mantis 0.17.4

mantis mantis 0.17.4a

mantis mantis 0.18.2

mantis mantis 0.18.3

mantis mantis 0.19.1

mantis mantis 0.19.2

mantis mantis 1.0.0a2

mantis mantis 1.0.0a3

mantis mantis

mantis mantis 0.13

mantis mantis 0.13.1

mantis mantis 0.14.6

mantis mantis 0.14.7

mantis mantis 0.14.8

mantis mantis 0.15.3

mantis mantis 0.15.4

mantis mantis 0.16.0

mantis mantis 0.16.1

mantis mantis 0.17.5

mantis mantis 0.18

mantis mantis 0.18a1

mantis mantis 0.19.0

mantis mantis 0.19.3

mantis mantis 0.9

Vendor Advisories

Several security related problems have been discovered in Mantis, a web-based bug tracking system The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4238 Missing input sanitising allows remote attackers to inject arbitrary web script or HTML CVE-2005-4518 Tobias Klein discovered that Mantis a ...