CVE-2005-3336

Published: 27 October 2005

SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Priority

Package	Release	Status
mantis Launchpad, Ubuntu, Debian	dapper	Released (0.19.4-2)
	edgy	Released (0.19.4-2)
	feisty	Released (0.19.4-2)
	upstream	Needs triage

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.