← Vulnerability feed

Vulnerability record · CVE-2005-3335 · published 27 October 2005

CVE-2005-3335: Mantis vulnerability

Mantis · Mantis

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.

7.5 CVSS 2.0 High EPSS 6.6% · top 6.4%
7.5CVSS 2.0 base score
6.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
28References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.mantisbt.org/changelog_page.php Patch
http://secunia.com/advisories/16506
http://secunia.com/advisories/16818 ExploitPatchVendor Advisory
http://secunia.com/advisories/17362
http://secunia.com/advisories/17654
http://secunia.com/secunia_research/2005-46/advisory/ ExploitPatchVendor Advisory
http://securityreason.com/securityalert/121
http://securitytracker.com/id?1015110
http://www.debian.org/security/2005/dsa-905
http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
http://www.securityfocus.com/bid/15212
http://www.securityfocus.com/bid/15227
http://www.vupen.com/english/advisories/2005/2221
https://exchange.xforce.ibmcloud.com/vulnerabilities/22886
http://bugs.mantisbt.org/changelog_page.php Patch
http://secunia.com/advisories/16506
http://secunia.com/advisories/16818 ExploitPatchVendor Advisory
http://secunia.com/advisories/17362
http://secunia.com/advisories/17654
http://secunia.com/secunia_research/2005-46/advisory/ ExploitPatchVendor Advisory
http://securityreason.com/securityalert/121
http://securitytracker.com/id?1015110
http://www.debian.org/security/2005/dsa-905
http://www.gentoo.org/security/en/glsa/glsa-200510-24.xml
http://www.securityfocus.com/bid/15212
http://www.securityfocus.com/bid/15227
http://www.vupen.com/english/advisories/2005/2221
https://exchange.xforce.ibmcloud.com/vulnerabilities/22886

Track CVE-2005-3335 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6515Mantis vulnerabilityMantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact a…EPSS 1.4%10.0CVE-2006-0665Mantis vulnerabilityUnspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: t…EPSS 1.8%10.0CVE-2002-1110Mantis vulnerabilityMultiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain p…EPSS 2.2%9.0CVE-2008-4687Mantis manage_proj_page.php sort parameter code injectionMantis before 1.1.4 passes the sort parameter from manage_proj_page.php into create_function within the multi_sort function in core/utility_api.php, …EPSS 67%analysed7.5CVE-2008-4689Mantis improper authentication vulnerabilityMantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.EPSS 2.5%7.5CVE-2008-3333Mantis path traversal vulnerabilityDirectory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the …EPSS 2.3%7.5CVE-2006-0146John lim adodb sql injection vulnerabilityThe server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) …EPSS 13%7.5CVE-2006-0147John lim adodb vulnerabilityDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis…EPSS 13%

Source: NIST National Vulnerability Database (record CVE-2005-3335), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.