CVE-2005-3335 in Mantis
Summary
by MITRE
PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 06/29/2025
The vulnerability described in CVE-2005-3335 represents a critical server-side include flaw in the Mantis bug tracking system version 1.0.0RC2 and 0.19.2. This issue manifests as a remote code execution vulnerability that stems from improper input validation within the bug_sponsorship_list_view_inc.php script. The vulnerability specifically affects the t_core_path parameter which is used to include core PHP files during the rendering of sponsorship lists. Attackers can exploit this weakness by manipulating the t_core_path parameter to point to arbitrary local files on the server, potentially enabling them to execute malicious PHP code or include sensitive system files.
This vulnerability falls under the CWE-98 weakness category, which specifically addresses improper file inclusion vulnerabilities where an application includes or requires a file whose path can be influenced by an attacker. The flaw represents a classic path traversal and code injection vulnerability that allows an attacker to bypass normal access controls and execute unauthorized code on the target system. The issue is particularly dangerous because it enables remote attackers to execute arbitrary PHP code without requiring authentication, making it a severe threat to web application security.
The operational impact of this vulnerability is substantial as it provides attackers with complete control over the affected Mantis installation. Once exploited, adversaries can execute arbitrary commands on the server, potentially leading to data theft, system compromise, or further lateral movement within the network. The vulnerability affects the core functionality of the bug tracking system, potentially allowing attackers to access sensitive project information, manipulate bug reports, or even use the compromised system as a launch point for attacks against other network resources. The remote nature of the exploit means that attackers can leverage this vulnerability from anywhere on the internet without needing physical access to the system.
Mitigation strategies for CVE-2005-3335 should focus on immediate patching of affected Mantis versions, as the vulnerability was resolved in subsequent releases. Organizations should implement strict input validation and sanitization measures for all user-supplied parameters, particularly those used in file inclusion operations. The principle of least privilege should be enforced by ensuring that the web application runs with minimal required permissions and that file inclusion paths are restricted to predefined safe locations. Additionally, implementing web application firewalls and intrusion detection systems can help detect and block exploitation attempts. Security monitoring should include checks for unusual file access patterns and unauthorized code execution attempts, while regular security audits should verify that all input parameters are properly validated before being used in file inclusion operations. The vulnerability demonstrates the critical importance of secure coding practices and input validation in preventing remote code execution attacks.