Gentoo: GLSA-200510-24 High: Mantis SQL Injection and Script Risks

Gentoo Linux Security Advisory GLSA 200510-24 https://security.gentoo.org/ Severity: High Title: Mantis: Multiple vulnerabilities Date: October 28, 2005 Bugs: #110326 ID: 200510-24

Synopsis ======= Mantis is affected by multiple vulnerabilities ranging from information disclosure to arbitrary script execution.
Background ========= Mantis is a web-based bugtracking system written in PHP.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/mantisbt < 0.19.3 >= 0.19.3
========== Mantis contains several vulnerabilities, including:
* a remote file inclusion vulnerability
* an SQL injection vulnerability
* multiple cross site scripting vulnerabilities
...