CVE-2005-4519: SQL Injection
Published Dec 28, 2005
·Updated
Multiple SQL injection vulnerabilities in the manage user page (manageuserpage.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manageuserpage.php), or (3) the sort parameter to viewallset.php.
Affected Software
65 affected components
Mantis Mantis=0.10.2
Mantis Mantis=0.10
Mantis Mantis=0.14.7
Mantis Mantis=0.18.2
Mantis Mantis=0.15.12
Mantis Mantis=0.18.0a2
Mantis Mantis=0.18.0a4
Mantis Mantis=0.15.3
Mantis Mantis<=0.19.3
Mantis Mantis=0.18
Mantis Mantis=0.15.9
Mantis Mantis=0.14.2
Mantis Mantis=0.9.1
Mantis Mantis=0.13
Mantis Mantis=0.10.1
Mantis Mantis=0.17.0
Mantis Mantis=0.15.10
Mantis Mantis=0.16.1
Mantis Mantis=1.0.0_rc1
Mantis Mantis=1.0.0_rc2
Mantis Mantis=0.15.2
Mantis Mantis=0.15.4
Mantis Mantis=0.15.11
Mantis Mantis=0.19.0a1
Mantis Mantis=0.11
Mantis Mantis=0.17.4a
Mantis Mantis=0.14.5
Mantis Mantis=0.19.0a2
Mantis Mantis=0.18.0a3
Mantis Mantis=0.17.2
Mantis Mantis=0.18.3
Mantis Mantis=1.0.0a3
Mantis Mantis=1.0.0a1
Mantis Mantis=0.14.3
Mantis Mantis=0.15.7
Mantis Mantis=0.17.3
Mantis Mantis=0.19.0_rc1
Mantis Mantis=0.17.1
Mantis Mantis=0.19.0a
Mantis Mantis=0.16
Mantis Mantis=1.0.0a2
Mantis Mantis=0.19.0
Mantis Mantis=0.18.0_rc1
Mantis Mantis<=1.0.0_rc3
Mantis Mantis=0.14.6
Mantis Mantis=0.14.4
Mantis Mantis=0.19.1
Mantis Mantis=0.11.1
Mantis Mantis=0.15.5
Mantis Mantis=0.19.2
Mantis Mantis=0.12
Mantis Mantis=0.15.1
Mantis Mantis=0.14.8
Mantis Mantis=0.17.5
Mantis Mantis=0.16.0
Mantis Mantis=0.18a1
Mantis Mantis=0.13.1
Mantis Mantis=0.15.8
Mantis Mantis=0.17.4
Mantis Mantis=0.14.1
Mantis Mantis=0.15.6
Mantis Mantis=0.17
Mantis Mantis=0.14
Mantis Mantis=0.15
Mantis Mantis=0.9
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 28, 2005
CVE Published
01:03 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4519?
CVE-2005-4519 is a critical vulnerability that allows remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2005-4519?
To fix CVE-2005-4519, upgrade Mantis to version 1.0.0rc4 or later.
3
Which versions of Mantis are affected by CVE-2005-4519?
CVE-2005-4519 affects Mantis versions 1.0.0rc3 and earlier.
4
What type of vulnerability is CVE-2005-4519?
CVE-2005-4519 is categorized as an SQL injection vulnerability.
5
Can CVE-2005-4519 lead to data breaches?
Yes, CVE-2005-4519 can potentially lead to data breaches by allowing unauthorized access to the database.