CVE-2005-2556

core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying…

published August 24, 2005

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01625 · 75.8th percentile
Published
2005-08-24T04:00Z
EPSS history
Timeline
  • 24 AUG 04:00Z
    core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying…
    cvelistv5