Detections
Analytics
Mantis < 0.19.3 Multiple Vulnerabilities
medium Nessus Plugin ID 20093
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple flaws.Description
The remote version of Mantis suffers from a remote file inclusion vulnerability. Provided PHP's 'register_globals' setting is enabled, An attacker may be able to leverage this issue to read arbitrary files on the local host or to execute arbitrary PHP code, possibly taken from third-party hosts.In addition, the installed version reportedly may be prone to SQL injection, cross-site scripting, and information disclosure attacks.
Solution
Upgrade to Mantis 0.19.3 or later.See Also
Plugin Details
Severity: Medium
ID: 20093
File Name: mantis_file_incl_sql_inject.nasl
Version: 1.21
Type: remote
Family: CGI abuses
Published: 10/27/2005
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:mantisbt:mantisbt
Required KB Items: installed_sw/MantisBT
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 8/22/2005
Reference Information
CVE: CVE-2005-3091, CVE-2005-3335, CVE-2005-3336, CVE-2005-3337, CVE-2005-3338, CVE-2005-3339