CVE-2006-0665

Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors

published February 13, 2006

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

⚠️ A mysterious vulnerability lurks in Mantis before version 1.0.0, with unknown implications that could lead to unexpected surprises! 🔍 Think of it as a hidden fault line in a quiet neighborhood — you can't see it, but if it shifts, the ground could shake unexpectedly, causing chaos in ways that are hard to predict. An attacker could potentially exploit this vulnerability to achieve unknown impacts. While we don’t have a precise picture of the risk yet, the ambiguity itself could lead to significant disruptions, possibly affecting your project's stability.

Put simply

Think of it as a hidden fault line in a quiet neighborhood — you can't see it, but if it shifts, the ground could shake unexpectedly, causing chaos in ways that are hard to predict. This unspecified vulnerability appears in two scripts, query_store.php and manage_proj_create.php, where the exact attack vectors and impacts remain unknown, making it a bit of a mystery box for developers.

What to do

An attacker could potentially exploit this vulnerability to achieve unknown impacts. While we don’t have a precise picture of the risk yet, the ambiguity itself could lead to significant disruptions, possibly affecting your project's stability. For now, it's best to update to the latest version of Mantis (1.0.0 or later) as soon as possible to mitigate potential risks. Regularly check for any updates from the vendor and keep an eye on third-party reports for any new information that could arise. You've got this! Staying informed and proactive will keep your projects safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01776 · 78.0th percentile
Published
2006-02-13T11:00Z
EPSS history
Timeline
  • 13 FEB 11:00Z
    Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors
    cvelistv5