Skip to contentMantisbt vulnerabilities
Newest
- mantisbtThe mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18...CVE-2014-85535.0 Medium
- mantisbtcore/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running...CVE-2014-63165.8 Medium
- mantisbtCross-site scripting (XSS) vulnerability in admin/copy_field.php in MantisBT before 1.2.18 allows...CVE-2014-92814.3 Medium
- mantisbtThe current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18...CVE-2014-92807.5 High
- mantisbtThe print_test_result function in admin/upgrade_unattended.php in MantisBT 1.1.0a3 through 1.2.x...CVE-2014-92795.0 Medium
- mantisbtCross-site scripting (XSS) vulnerability in the projax_array_serialize_for_autocomplete function...CVE-2014-92704.3 Medium
- mantisbtMantisBT before 1.2.18 uses the public_key parameter value as the key to the CAPTCHA answer,...CVE-2014-91175.0 Medium
- mantisbt, debian linux +1 moreMultiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow...CVE-2014-90897.5 High
- mantisbtMantisBT before 1.2.18 allows remote authenticated users to bypass the ...CVE-2014-89884.0 Medium
- mantisbtCross-site scripting (XSS) vulnerability in the selection list in the filters in the...CVE-2014-89863.5 Low
- mantisbtThe XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote...CVE-2014-8598Public exploitEPSS 38.5%6.4 Medium
- mantisbtThe XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute...CVE-2014-7146Public exploitEPSS 50.6%7.5 High
- mantisbtSQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api...CVE-2014-85547.5 High
- mantisbtgpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a...CVE-2014-63875.0 Medium
- mantisbtMantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial...CVE-2013-18835.0 Medium
- mantisbtMultiple cross-site scripting (XSS) vulnerabilities in core/summary_api.php in MantisBT 1.2.12...CVE-2013-18102.1 Low
- mantisbtCross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core...CVE-2013-01974.3 Medium
- mantisbt, debian linux +1 moreMultiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to...CVE-2014-16097.5 High
- mantisbt, debian linux +1 moreSQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT...CVE-2014-16087.5 High
- mantisbtSQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT...CVE-2014-2238EPSS 11.3%6.5 Medium
- mantisbtCross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1...CVE-2013-44603.5 Low
- mantisbtcore/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail...CVE-2012-55235.5 Medium
- mantisbtMantisBT before 1.2.12 does not use an expected default value during decisions about whether a...CVE-2012-55225.5 Medium
- mantisbtMantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated...CVE-2012-11214.9 Medium
- mantisbtThe mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9...CVE-2012-11237.5 High
- mantisbtbug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold...CVE-2012-11223.6 Low
- mantisbtThe SOAP API in MantisBT before 1.2.9 does not properly enforce the...CVE-2012-11203.6 Low
- mantisbtMantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier...CVE-2012-11196.4 Medium
- mantisbtThe access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not...CVE-2012-11184.3 Medium
- mantisbtMantisBT before 1.2.11 does not check the delete_attachments_threshold permission when...CVE-2012-26923.6 Low
- mantisbtThe mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly...CVE-2012-26917.5 High
- mantisbtMantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-37555.0 Medium
- mantisbtCross-site scripting (XSS) vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8...CVE-2011-35784.3 Medium
- mantisbtMultiple cross-site scripting (XSS) vulnerabilities in config_defaults_inc.php in MantisBT before...CVE-2011-33564.3 Medium
- mantisbtMultiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7...CVE-2011-2938Public exploit4.3 Medium
- mantisbtMultiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.8 allow remote...CVE-2011-33584.3 Medium
- mantisbtDirectory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows...CVE-2011-33576.8 Medium
- mantisbtDirectory traversal vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows...CVE-2010-4350Public exploit5.1 Medium
- mantisbtadmin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive...CVE-2010-4349Public exploit5.0 Medium
- mantisbtCross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4...CVE-2010-4348Public exploit4.3 Medium
- mantisbtCross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows...CVE-2010-37634.3 Medium
- mantisbtMultiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote...CVE-2010-33033.5 Low
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated...CVE-2010-28023.5 Low
- mantisbtMantisBT Cross-site Scripting vulnerabilityCVE-2010-25742.1 Low
- mantisbtMantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session...CVE-2008-31025.0 Medium