CVE-2006-0840

manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to…

published February 22, 2006

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01931 · 79.7th percentile
Published
2006-02-22T02:00Z
EPSS history
Timeline
  • 22 FEB 02:00Z
    manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to…
    cvelistv5