Skip to content

Commit

Permalink
Updated title of 'Detailed explanation' in advisories, as it caused c…
Browse files Browse the repository at this point in the history
…onfusion.

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1279 f5dc347c-c33d-0410-90a0-b07cc1902cb9
  • Loading branch information
jlatour committed Aug 21, 2002
1 parent 36d4dbd commit bba27a3
Show file tree
Hide file tree
Showing 5 changed files with 9 additions and 9 deletions.
4 changes: 2 additions & 2 deletions advisories/2002/2002-01.txt
Expand Up @@ -6,7 +6,7 @@
2. Summary / Impact analysis
3. Affected versions
4. Workaround / Solution
5. Detailed explanation
5. Proof of Vulnerability
6. Contact details

1. Introduction
Expand Down Expand Up @@ -80,7 +80,7 @@ patched to secure the exploitable query:
Enabling magic_quotes_gpc in your PHP configuration will also prevent the
problem from being exploitable.

5. Detailed explanation
5. Proof of Vulnerability

By modifying the username or the email of a Mantis account, it is possible
to change any column of the Mantis user table (mantis_user_table by
Expand Down
4 changes: 2 additions & 2 deletions advisories/2002/2002-02.txt
Expand Up @@ -6,7 +6,7 @@
2. Summary / Impact analysis
3. Affected versions
4. Workaround / Solution
5. Detailed explanation
5. Proof of Vulnerability
6. Contact details

1. Introduction
Expand Down Expand Up @@ -65,7 +65,7 @@ earlier versions:
$f_user_id = get_current_user_field( "id" );
}

5. Detailed explanation
5. Proof of Vulnerability

No trickery is required to allow a reporter to see the summaries of bugs
that (s)he did not report. The reporter just has to go to 'View Bugs', click
Expand Down
2 changes: 1 addition & 1 deletion advisories/2002/2002-03.txt
Expand Up @@ -98,7 +98,7 @@ the appropriate checks.
}
# end project selection

5. Detailed explanation
5. Proof of Vulnerability

To take advantage of this vulnerability, the attacker would need to know the
project_id of the private project he wishes to attack. This is not terribly
Expand Down
4 changes: 2 additions & 2 deletions advisories/2002/2002-04.txt
Expand Up @@ -6,7 +6,7 @@
2. Summary / Impact analysis
3. Affected versions
4. Workaround / Solution
5. Detailed explanation
5. Proof of Vulnerability
6. Credit
7. Contact details

Expand Down Expand Up @@ -71,7 +71,7 @@ the following lines at the top of summary_graph_functions.php:
exit;
}

5. Detailed explanation
5. Proof of Vulnerability

To exploit this vulnerability, an attacker only has to store the PHP code
(s)he wishes to execute in a textfile, make this available on a webserver
Expand Down
4 changes: 2 additions & 2 deletions advisories/2002/2002-05.txt
Expand Up @@ -7,7 +7,7 @@ vulnerability in Mantis
2. Summary / Impact analysis
3. Affected versions
4. Workaround / Solution
5. Detailed explanation
5. Proof of Vulnerability
5.1 Arbitrary code execution
5.2 Displaying local files
6. Credit
Expand Down Expand Up @@ -94,7 +94,7 @@ the following lines in core_API.php:
exit;
}

5. Detailed explanation
5. Proof of Vulnerability

5.1 Arbitrary code execution

Expand Down

0 comments on commit bba27a3

Please sign in to comment.