CVE-2005-4519

Publication date 28 December 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mantis 7.04 feisty
Fixed 0.19.4-2
6.10 edgy
Fixed 0.19.4-2
6.06 LTS dapper
Fixed 0.19.4-2