Code injection

2006-02-1311:06:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.2%

JSON

Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public.

CPENameOperatorVersion
mantiseq0.18.2
mantiseq0.18.0-a2
mantiseq0.18.0-a4
mantiseq0.18
mantiseq1.0.0-rc3
mantiseq1.0.0-rc1
mantiseq0.19.3
mantiseq1.0.0-rc2
mantiseq0.19.0-a1
mantiseq0.17.497

Name	Operator	Version
mantis	eq	0.18.2
mantis	eq	0.18.0-a2
mantis	eq	0.18.0-a4
mantis	eq	0.18
mantis	eq	1.0.0-rc3
mantis	eq	1.0.0-rc1
mantis	eq	0.19.3
mantis	eq	1.0.0-rc2
mantis	eq	0.19.0-a1
mantis	eq	0.17.497