CGI abuses : Mantis multiple vulnerabilities

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.51733

Kategorie: CGI abuses

Titel: Mantis multiple vulnerabilities

Zusammenfassung: NOSUMMARY

Beschreibung: Description:

Mantis suffers from a dual vulnerability that allows
remote attackers to access arbitrary files on your
system, as well as possible execute abritrary commands
on your system with the priviledges of the web server
process.

If you are running version 0.17.2 or earlier, please
be advised that these versions also suffer from
an SQL injection attack vulnerability in the
'account_update.php' file.

Solution: Upgrade to version 0.17.4 or later.

Risk factor : High

Querverweis: BugTraq ID: 5509
BugTraq ID: 5510

Copyright Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.51733
Kategorie:	CGI abuses
Titel:	Mantis multiple vulnerabilities
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: Mantis suffers from a dual vulnerability that allows remote attackers to access arbitrary files on your system, as well as possible execute abritrary commands on your system with the priviledges of the web server process. If you are running version 0.17.2 or earlier, please be advised that these versions also suffer from an SQL injection attack vulnerability in the 'account_update.php' file. Solution: Upgrade to version 0.17.4 or later. Risk factor : High
Querverweis:	BugTraq ID: 5509 BugTraq ID: 5510
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com