CVE-2006-0840: Mantis

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519.

Affected products

• Mantis Mantis: up to and including 1.0.0_rc4; version 0.9 only; version 0.9.0 only; version 0.9.1 only; version 0.10 only; version 0.10.0 only; …

Published 2006-02-22. Last modified 2026-06-16.