CVE-2014-9089

Multiple SQL injection vulnerabilities in viewallbugpage.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to viewallset.php...

CVE-2014-9089: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in viewallbugpage.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to viewallset.php...

Debian DSA-1133-1 : mantis - missing input sanitising

Several remote vulnerabilities have been discovered in the Mantis bug tracking system, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0664 A cross-site scripting vulnerability was discovered ...

CVE-2006-1577: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 startday, 2 startyear, and 3 startmonth parameters...

CVE-2006-0841: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 hidestatus, 2 handlerid, 3 usermonitor, 4 reporterid, 5 viewtype, 6 showseverity, 7 showcategory, 8 showstatus, 9 showresolution, 10 showbuild, 1...

CVE-2005-4519: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the manage user page manageuserpage.php in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prefix and 2 sort parameters to the manage user page manageuserpage.php, or 3 the sort parameter to viewallset.php...

CVE-2005-3337

Multiple cross-site scripting XSS vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via 1 unknown vectors involving Javascript and 2 mantis/viewallset.php...

CVE-2005-3337: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via 1 unknown vectors involving Javascript and 2 mantis/viewallset.php...

CVE-2005-2557: Undefined Security Weakness

Cross-site scripting XSS vulnerability in viewallset.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug0005959, and a different vulnerability than CVE-2005-3090...

CVE-2004-1730: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via 1 the return parameter to loginpage.php, 2 e-mail field in signup.php, 3 action parameter to loginselectprojpage.php, or 4 hidestatus parameter to viewallset.php...