CVE-2002-1110

Опубликовано: 04 окт. 2002

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.

Ссылки

http://mantisbt.sourceforge.net/advisories/2002/2002-01.txt
http://marc.info/?l=bugtraq&m=102978728718851&w=2
http://www.debian.org/security/2002/dsa-153
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9897.php
http://www.securityfocus.com/bid/5510
Patch
Vendor Advisory
http://mantisbt.sourceforge.net/advisories/2002/2002-01.txt
http://marc.info/?l=bugtraq&m=102978728718851&w=2
http://www.debian.org/security/2002/dsa-153
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9897.php
http://www.securityfocus.com/bid/5510
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*

cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00528

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1110

debian

около 23 лет назад

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, w ...

GHSA-q853-rgvw-43wh

github

больше 3 лет назад