CVE-2006-0840

CVE-2006-0840 describes a SQL error vulnerability in Mantis 1.00rc4 and earlier, specifically within the manage_user_page.php script. An unauthenticated attacker can trigger a SQL error by injecting a single quote character into the 'sort' parameter, which can then be repeatedly reported to a user with a specific cookie. The vulnerability has a CVSS score of 5.0 (medium severity) with an attack vector of network, low attack complexity, no authentication required, and a potential impact of partial availability disruption. There is no impact on confidentiality or integrity. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit or ExploitDB. The vulnerability has garnered minimal community discussion or media coverage, indicating low public attention.