Skip to contentMantisbt vulnerabilities
Newest
- mantisbtMantisBT XSS when uploading an attachmentCVE-2019-15539Fix available6.1 Medium
- mantisbt source integrationA cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before...CVE-2020-89816.1 Medium
- mantisbtMantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline...CVE-2009-28026.1 Medium
- mantisbtA cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report...CVE-2013-19325.4 Medium
- mantisbt, fedoraproject fedora +1 moreA cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject...CVE-2013-19316.1 Medium
- mantisbt, fedoraproject fedora +1 moreMantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close...CVE-2013-19304.3 Medium
- mantisbtMantisBT Remote Code ExecutionCVE-2019-15715Public exploitFix availableEPSS 30.0%7.2 High
- mantisbtMantisBT allows cross-site scripting (XSS) via crafted filenameCVE-2019-15074Fix available9.6 Critical
- mantisbtMantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFOCVE-2018-16514Fix available4.7 Medium
- mantisbtAn issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on...CVE-2018-98396.5 Medium
- mantisbtMantisBT allows XSS via Edit Filter pageCVE-2018-17783Fix available5.4 Medium
- mantisbtMantisBT allows XSS via the Manage Filter pageCVE-2018-17782Fix available5.4 Medium
- mantisbt source integrationAn issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for...CVE-2018-163626.1 Medium
- mantisbtMantisBT allows XSS on the Edit Filter page via crafted filter nameCVE-2018-14504Fix available6.1 Medium
- mantisbtMantisBT allows XSS via View Filters pageCVE-2018-13055Fix available6.1 Medium
- mantisbtview_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to...CVE-2018-65265.3 Medium
- mantisbt** DISPUTED ** MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor...CVE-2018-6382Disputed3.3 Low
- mantisbtCAPTCHA bypass vulnerability in MantisBT before 1.2.19.CVE-2014-96247.5 High
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.CVE-2015-20466.1 Medium
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2...CVE-2014-97016.5 Medium
- mantisbtIf, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator...CVE-2017-124194.9 Medium
- mantisbtMantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.phpCVE-2017-12062Fix available6.1 Medium
- mantisbtMantisBT XSS allows unsanitized input via admin/install.phpCVE-2017-12061Fix available6.1 Medium
- mantisbtThe "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access...CVE-2015-50595.3 Medium
- mantisbtMantisBT vulnerable to CSRF and Open Redirect attacksCVE-2017-7620Public exploitFix available6.5 Medium
- mantisbtMantisBT XSS via my_view_page.php and view_user_page.phpCVE-2017-7897Fix available6.1 Medium
- mantisbtMantisBT allows arbitrary password resetCVE-2017-7615Public exploitFix availableEPSS 91.2%8.8 High
- mantisbtMantisBT vulnerable to XSS through config_option parameter in adm_config_report.phpCVE-2017-7309Fix availableEPSS 63.3%4.8 Medium
- mantisbtMantisBT XSS via move_attachments_page.phpCVE-2017-7241Fix available4.8 Medium
- mantisbtMantisBT XSS via adm_config_report.php's action parameterCVE-2017-6973Fix available4.8 Medium
- mantisbtA cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to...CVE-2017-72226.1 Medium
- mantisbt source integrationAn XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page...CVE-2017-69586.1 Medium
- mantisbtA cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1...CVE-2017-67996.1 Medium
- mantisbtA cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7...CVE-2017-67976.1 Medium
- mantisbtMantisBT XSS through weak CSP when using Gravatar pluginCVE-2016-7111Fix available4.7 Medium
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2...CVE-2016-68376.1 Medium
- mantisbtCross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19...CVE-2016-5364Fix available6.1 Medium
- mantisbtIncomplete blacklist vulnerability in the config_is_private function in config_api.php in...CVE-2014-97595.3 Medium
- mantisbtCross-site scripting (XSS) vulnerability in the "set configuration" box in the Configuration...CVE-2014-89873.5 Low
- mantisbtThe string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses...CVE-2015-10425.8 Medium
- mantisbtSQL injection vulnerability in manage_user_page.php in MantisBT before 1.2.19 and 1.3.x before 1...CVE-2014-95736.0 Medium
- mantisbtMantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 does not properly restrict access to /*...CVE-2014-95727.5 High
- mantisbtCross-site scripting (XSS) vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x...CVE-2014-95714.3 Medium
- mantisbt, debian linux +1 moreThe string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly...CVE-2014-92724.3 Medium
- mantisbt, debian linux +1 moreCross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows...CVE-2014-92715.4 Medium
- mantisbt, debian linux +1 moreCross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x...CVE-2014-92692.6 Low
- mantisbt, debian linux +1 moreA cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report...CVE-2013-19345.4 Medium
- mantis, mantisbt, debian linux +2 moreAn access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to...CVE-2013-18114.3 Medium
- mantisbtMantisBT before 1.2.18 does not properly check permissions when sending an email that indicates...CVE-2014-95063.5 Low
- mantisbtbug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via...CVE-2014-93885.0 Medium
- Show moreLoading…