NVD

Id
59570  
Name
CVE-2006-0840  
Description
manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a " (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-02-21  
Modified Date
2008-09-05  
Seq
2006-0840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
306385 59570 CVE-2006-0840 http://morph3us.org/advisories/20060214-mantis-100rc4.txt  View
306386 59570 CVE-2006-0840 http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059  View
306387 59570 CVE-2006-0840 http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963  View
306388 59570 CVE-2006-0840 20060215 [BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4  View
306389 59570 CVE-2006-0840 16657  View
306390 59570 CVE-2006-0840 mantis-manageuserpagesql-injection(24726)  View

Related JVN