>> Mantis ADOdb Test Scripts Remote Command Execution Vulnerabilities
Title : Mantis ADOdb Test Scripts Remote Command Execution Vulnerabilities VUPEN ID : VUPEN/ADV-2006-0102 CVE ID : CVE-2006-0146 - CVE-2006-0147
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-01-09
Technical Description
Two vulnerabilities were identified in Mantis, which could be exploited by remote attackers to execute arbitrary commands. These flaws are due to input validation errors in ADOdb. For additional information, see : VUPEN/ADV-2006-0101