CVE:CVE-2005-2556
CNNVD:CNNVD-200508-287
Mantis 0.19.0a1至1.0.0a3(启动register_globals)中的core/database_api.php允许远程攻击者通过修改g_db_type变量以及监控响应速度连接内部数据库。该漏洞以#0005956标识。
solution:Upgrade mantis mantis to a higher version than 0.19.0,0.19.0_rc1,0.19.0a1,0.19.0a2,0.19.1,0.19.2,1.0.0a1,1.0.0a2,1.0.0a3,and avoid the version 0.19.0,0.19.0_rc1,0.19.0a1,0.19.0a2,0.19.1,0.19.2,1.0.0a1,1.0.0a2,1.0.0a3