Unspecified vulnerability in (1) querystore.php and (2) manageprojcreate.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public.
Mantis before 1.1.0a2 sets the default value of $gbugreminderthreshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.
Multiple SQL injection vulnerabilities in the manage user page (manageuserpage.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manageuserpage.php), or (3) the sort parameter to viewallset.php.
core/databaseapi.php in Mantis 0.19.0a1 through 1.0.0a3, with registerglobals enabled, allows remote attackers to connect to internal databases by modifying the gdbtype variable and monitoring the speed of responses, as identified by bug#0005956.
Multiple cross-site scripting (XSS) vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) startday, (2) startyear, and (3) startmonth parameters.
Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear whether this is a duplicate of another CVE.
CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in logincookietest.php and (2) ref parameter in loginselectprojpage.php.
Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak.
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
manageuserpage.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTISMANAGECOOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519.
Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field.
Cross-site scripting (XSS) vulnerability in viewallset.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090.
Cross-site scripting (XSS) vulnerability in bugactiongrouppage.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when viewallbugpage.php is used to delete the bug, as identified by bug#0006002, a different vulnerability than CVE-2005-2557.
Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".
Multiple cross-site scripting (XSS) vulnerabilities in the viewfilterspage.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) viewtype and (2) targetfield parameters.
Cross-site scripting (XSS) vulnerability in viewfilterspage.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the targetfield parameter.
Cross-site scripting (XSS) vulnerability in configdefaultsinc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public.
Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hidestatus, (2) handlerid, (3) usermonitor, (4) reporterid, (5) viewtype, (6) showseverity, (7) showcategory, (8) showstatus, (9) showresolution, (10) showbuild, (11) showprofile, (12) showpriority, (13) highlightchanged, (14) relationshiptype, and (15) relationshipbug parameters in (a) viewallset.php; the (16) sort parameter in (b) manageuserpage.php; the (17) viewtype parameter in (c) viewfilterspage.php; and the (18) title parameter in (d) projdocdelete.php. NOTE: item 17 might be subsumed by CVE-2005-4522.