mantis vulnerabilities (Debian)
63 vulnerabilities.
-
mantisDebian Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19... 6.1 Medium -
mantisDebian The string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly... 4.3 Medium -
mantisDebian Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows... 5.4 Medium -
mantisDebian Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x... 2.6 Low -
mantisDebian A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report... 5.4 Medium -
mantisDebian An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to... 4.3 Medium -
mantisDebian MantisBT before 1.2.18 does not properly check permissions when sending an email that indicates... 3.5 Low -
mantisDebian bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via... 5.0 Medium -
mantisDebian The mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18... 5.0 Medium -
mantisDebian core/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running... 5.8 Medium -
mantisDebian Cross-site scripting (XSS) vulnerability in admin/copy_field.php in MantisBT before 1.2.18 allows... 4.3 Medium -
mantisDebian The current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18... 7.5 High -
mantisDebian Cross-site scripting (XSS) vulnerability in the projax_array_serialize_for_autocomplete function... 4.3 Medium -
mantisDebian MantisBT before 1.2.18 uses the public_key parameter value as the key to the CAPTCHA answer,... 5.0 Medium -
mantisDebian Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow... 7.5 High -
mantisDebian MantisBT before 1.2.18 allows remote authenticated users to bypass the ... 4.0 Medium -
mantisDebian Cross-site scripting (XSS) vulnerability in the selection list in the filters in the... 3.5 Low -
mantisDebian The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote... 6.4 Medium -
mantisDebian The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute... 7.5 High -
mantisDebian SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api... 7.5 High -
mantisDebian gpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a... 5.0 Medium -
mantisDebian Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to... 7.5 High -
mantisDebian SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT... 7.5 High -
mantisDebian Cross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1... 3.5 Low -
mantisDebian The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9... 7.5 High -
mantisDebian bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold... 3.6 Low -
mantisDebian The SOAP API in MantisBT before 1.2.9 does not properly enforce the... 3.6 Low -
mantisDebian MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier... 6.4 Medium -
mantisDebian The access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not... 4.3 Medium -
mantisDebian MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when... 3.6 Low -
mantisDebian Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote... 4.3 Medium -
mantisDebian Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows... 6.8 Medium -
mantisDebian mantis - information leak No score -
mantisDebian Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote... 4.3 Medium -
mantisDebian Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History),... 5.0 Medium -
mantisDebian Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5... 6.8 Medium -
mantisDebian Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote... 4.3 Medium -
mantisDebian Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before... 10.0 High -
mantisDebian Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows... 4.3 Medium -
mantisDebian manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter... 5.0 Medium -
mantisDebian Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which... 5.0 Medium -
mantisDebian Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote... 5.0 Medium -
mantisDebian Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script... 4.3 Medium -
mantisDebian CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify... 5.0 Medium -
mantisDebian Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have... 5.0 Medium -
mantisDebian Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1... 7.5 High -
mantisDebian Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by... 7.5 High -
mantisDebian Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier... 4.3 Medium -
mantisDebian Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and... 7.2 High -
mantisDebian Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display... 5.0 Medium - Show olderLoading…