Debian Security Advisory DSA 944-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 944-1. Several security related problems have been discovered in Mantis, a web-based bug tracking system. For details on the issues resolved, please visit the referenced advisories. The old stable distribution woody does no...

[SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 944-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4519

CVE-2005-4519 covers multiple SQL injection vulnerabilities in MantisBT (manage_user_page.php and related pages) that allow remote attackers to execute arbitrary SQL commands via parameters such as (1) prefix, (2) sort on manage_user_page.php, or (3) sort on view_all_set.php. Connected sources al...