CVE-2005-3335

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19...

7.5 HighFix available

CVE-2005-3335 is a high vulnerability (CVSS 7.5) in Mantis, published October 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.62%, the 93rd percentile. Fixed in mantis 0.19.2-4.1.

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.

Exploit likelihood

6.62%Up 2.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-3335
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-3335
Updated: 2026-11-02

EUVDEUVD-2005-3334 No score

Record: EUVD-2005-3334
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c299-g72j-qp3x No score

PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19...

Record: GHSA-c299-g72j-qp3x
Updated: 2026-11-02

Affected products

mantis

Affected packages

Affected packages
Package	Affected	Fixed
`mantis` Debian:3.1	before 0.19.2-4.1, plus listed versions 0.19.2-30.19.2-4	0.19.2-4.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 10 moreShow less