CVE-2006-0840: Medium severity Mantis Mantis vulnerability
manageuserpage.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTISMANAGECOOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0840?
CVE-2006-0840 is classified as a moderate vulnerability due to its ability to trigger SQL errors affecting user experience without compromising database integrity.
How do I fix CVE-2006-0840?
To fix CVE-2006-0840, update your Mantis installation to a version later than 1.0.0rc4, which includes patches for this vulnerability.
What software versions are affected by CVE-2006-0840?
CVE-2006-0840 affects Mantis 1.00rc4 and earlier, as well as multiple earlier versions including 0.9.x and 0.10.x up to 0.10.2.
Is CVE-2006-0840 an SQL injection vulnerability?
CVE-2006-0840 is not classified as an SQL injection vulnerability, but it allows an attacker to cause SQL errors by manipulating the sort parameter.
What kind of attack can exploit CVE-2006-0840?
CVE-2006-0840 can be exploited by remote attackers triggering SQL errors that may lead to information disclosure through repeated error messages.