Mantis vulnerabilities

Products

• Mantis 44

Newest

• mantis, mantisbt, debian linux +2 more An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to... CVE-2013-1811 Fix available 4.3 MediumJanuary 6, 2015
• mantis Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for... CVE-2008-4689 7.5 HighOctober 22, 2008
• mantis core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before... CVE-2008-4688 EPSS 11.7% 5.0 MediumOctober 22, 2008
• mantis manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute... CVE-2008-4687 Public exploit EPSS 67.5% 9.0 HighOctober 22, 2008
• mantis Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote... CVE-2008-3333 7.5 HighJuly 27, 2008
• mantis Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote... CVE-2008-3332 Public exploit 6.5 MediumJuly 27, 2008
• mantis Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2... CVE-2008-3331 Public exploit 3.5 LowJuly 27, 2008
• mantis Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject... CVE-2008-0404 4.3 MediumJanuary 23, 2008
• mantis Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote... CVE-2007-6611 Fix available 4.3 MediumJanuary 3, 2008
• mantis Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History),... CVE-2006-6574 Fix available 5.0 MediumDecember 15, 2006
• mantis Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead... CVE-2006-6515 10.0 HighDecember 14, 2006
• mantis Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5... CVE-2006-1577 Fix available 6.8 MediumApril 2, 2006
• mantis Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote... CVE-2006-0841 Public exploitFix available 4.3 MediumFebruary 22, 2006
• mantis Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before... CVE-2006-0665 Fix available 10.0 HighFebruary 13, 2006
• mantis Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows... CVE-2006-0664 Fix available 4.3 MediumFebruary 13, 2006
• mantis manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter... CVE-2006-0840 Fix available 5.0 MediumJanuary 17, 2006
• john lim adodb, mantis, moodle +2 more +4 more Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4... CVE-2006-0147 Public exploitFix available EPSS 13.1% 7.5 HighJanuary 9, 2006
• john lim adodb, mantis, mediabeez +3 more +5 more The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including ... CVE-2006-0146 Public exploitFix available EPSS 13.2% 7.5 HighJanuary 9, 2006
• mantis Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote... CVE-2005-4523 Fix available 5.0 MediumDecember 28, 2005
• mantis Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script... CVE-2005-4522 Fix available 4.3 MediumDecember 28, 2005
• mantis Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have... CVE-2005-4520 Fix available 5.0 MediumDecember 28, 2005
• mantis Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1... CVE-2005-4519 Fix available 7.5 HighDecember 28, 2005
• mantis Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier... CVE-2005-4238 Public exploitFix available 4.3 MediumDecember 14, 2005
• mantis Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and... CVE-2005-3339 Fix available 7.2 HighOctober 27, 2005
• mantis Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display... CVE-2005-3338 Fix available 5.0 MediumOctober 27, 2005
• mantis Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote... CVE-2005-3337 4.3 MediumOctober 27, 2005
• mantis SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute... CVE-2005-3336 Fix available 7.5 HighOctober 27, 2005
• mantis PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19... CVE-2005-3335 Fix available 7.5 HighOctober 27, 2005
• mantis Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to... CVE-2005-3091 Fix available 4.3 MediumSeptember 28, 2005
• mantis Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1... CVE-2005-3090 4.3 MediumSeptember 28, 2005
• mantis, debian linux +1 more Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3... CVE-2005-2557 Public exploitFix available 4.3 MediumAugust 19, 2005
• mantis core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows... CVE-2005-2556 Fix available 7.5 HighAugust 19, 2005
• mantis Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface... CVE-2004-2666 5.0 MediumDecember 31, 2004
• mantis PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute... CVE-2004-1734 7.5 HighDecember 31, 2004
• mantis Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject... CVE-2004-1730 4.3 MediumDecember 31, 2004
• mantis signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating... CVE-2004-1731 Public exploit 5.0 MediumAugust 20, 2004
• mantis Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable... CVE-2003-0499 Fix available 3.6 LowJune 28, 2003
• mantis The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of... CVE-2002-1116 Fix available 7.5 HighSeptember 4, 2002
• mantis Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug... CVE-2002-1115 Fix available 5.0 MediumSeptember 4, 2002
• mantis config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read... CVE-2002-1114 Fix available 7.5 HighAugust 14, 2002
• mantis summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute... CVE-2002-1113 Public exploitFix available 7.5 HighAugust 14, 2002
• mantis Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by... CVE-2002-1112 Fix available 5.0 MediumAugust 14, 2002
• mantis print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option,... CVE-2002-1111 Fix available 5.0 MediumAugust 14, 2002
• mantis Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without... CVE-2002-1110 Fix available 10.0 HighAugust 14, 2002