CGI abuses : Mantis multiple vulnerabilities

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.51733

Categoría: CGI abuses

Título: Mantis multiple vulnerabilities

Resumen: NOSUMMARY

Descripción: Description:

Mantis suffers from a dual vulnerability that allows
remote attackers to access arbitrary files on your
system, as well as possible execute abritrary commands
on your system with the priviledges of the web server
process.

If you are running version 0.17.2 or earlier, please
be advised that these versions also suffer from
an SQL injection attack vulnerability in the
'account_update.php' file.

Solution: Upgrade to version 0.17.4 or later.

Risk factor : High

Referencia Cruzada: BugTraq ID: 5509
BugTraq ID: 5510

Copyright Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.51733
Categoría:	CGI abuses
Título:	Mantis multiple vulnerabilities
Resumen:	NOSUMMARY
Descripción:	Description: Mantis suffers from a dual vulnerability that allows remote attackers to access arbitrary files on your system, as well as possible execute abritrary commands on your system with the priviledges of the web server process. If you are running version 0.17.2 or earlier, please be advised that these versions also suffer from an SQL injection attack vulnerability in the 'account_update.php' file. Solution: Upgrade to version 0.17.4 or later. Risk factor : High
Referencia Cruzada:	BugTraq ID: 5509 BugTraq ID: 5510
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com