Lucene search

[email protected]CVE-2008-3332

HistoryJul 27, 2008 - 11:41 p.m.

CVE-2008-3332

2008-07-2723:41:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-3332

eval injection

adm_config_set.php

mantis

vulnerability

remote code execution

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

JSON

Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.

Affected configurations

NVD

Node

mantismantisRange≤1.1.1

mantismantisMatch0.9

mantismantisMatch0.9.0

mantismantisMatch0.9.1

mantismantisMatch0.10

mantismantisMatch0.10.0

mantismantisMatch0.10.1

mantismantisMatch0.10.2

mantismantisMatch0.11

mantismantisMatch0.11.0

mantismantisMatch0.11.1

mantismantisMatch0.12

mantismantisMatch0.12.0

mantismantisMatch0.13

mantismantisMatch0.13.0

mantismantisMatch0.13.1

mantismantisMatch0.14

mantismantisMatch0.14.0

mantismantisMatch0.14.1

mantismantisMatch0.14.2

mantismantisMatch0.14.3

mantismantisMatch0.14.4

mantismantisMatch0.14.5

mantismantisMatch0.14.6

mantismantisMatch0.14.7

mantismantisMatch0.14.8

mantismantisMatch0.15

mantismantisMatch0.15.0

mantismantisMatch0.15.1

mantismantisMatch0.15.2

mantismantisMatch0.15.3

mantismantisMatch0.15.4

mantismantisMatch0.15.5

mantismantisMatch0.15.6

mantismantisMatch0.15.7

mantismantisMatch0.15.8

mantismantisMatch0.15.9

mantismantisMatch0.15.10

mantismantisMatch0.15.11

mantismantisMatch0.15.12

mantismantisMatch0.16

mantismantisMatch0.16.0

mantismantisMatch0.16.1

mantismantisMatch0.17

mantismantisMatch0.17.0

mantismantisMatch0.17.1

mantismantisMatch0.17.2

mantismantisMatch0.17.3

mantismantisMatch0.17.4

mantismantisMatch0.17.4a

mantismantisMatch0.17.5

mantismantisMatch0.18

mantismantisMatch0.18.0

mantismantisMatch0.18.0_rc1

mantismantisMatch0.18.0a1

mantismantisMatch0.18.0a2

mantismantisMatch0.18.0a3

mantismantisMatch0.18.0a4

mantismantisMatch0.18.1

mantismantisMatch0.18.2

mantismantisMatch0.18.3

mantismantisMatch0.18a1

mantismantisMatch0.19

mantismantisMatch0.19.0

mantismantisMatch0.19.0_rc1

mantismantisMatch0.19.0a

mantismantisMatch0.19.0a1

mantismantisMatch0.19.0a2

mantismantisMatch0.19.1

mantismantisMatch0.19.2

mantismantisMatch0.19.3

mantismantisMatch0.19.4

mantismantisMatch1.0

mantismantisMatch1.0.0

mantismantisMatch1.0.0_rc1

mantismantisMatch1.0.0_rc2

mantismantisMatch1.0.0_rc3

mantismantisMatch1.0.0_rc4

mantismantisMatch1.0.0_rc5

mantismantisMatch1.0.0a1

mantismantisMatch1.0.0a2

mantismantisMatch1.0.0a3

mantismantisMatch1.0.0rc1

mantismantisMatch1.0.0rc2

mantismantisMatch1.0.0rc3

mantismantisMatch1.0.0rc4

mantismantisMatch1.0.1

mantismantisMatch1.0.2

mantismantisMatch1.0.3

mantismantisMatch1.0.4

mantismantisMatch1.0.5

mantismantisMatch1.0.6

mantismantisMatch1.1

mantismantisMatch1.1.0

mantismantisMatch1.1.0a1

CPENameOperatorVersion
mantis:mantismantisle1.1.1
mantis:mantismantiseq0.9
mantis:mantismantiseq0.9.0
mantis:mantismantiseq0.9.1
mantis:mantismantiseq0.10
mantis:mantismantiseq0.10.0
mantis:mantismantiseq0.10.1
mantis:mantismantiseq0.10.2
mantis:mantismantiseq0.11
mantis:mantismantiseq0.11.0

CPE	Name	Operator	Version
mantis:mantis	mantis	le	1.1.1
mantis:mantis	mantis	eq	0.9
mantis:mantis	mantis	eq	0.9.0
mantis:mantis	mantis	eq	0.9.1
mantis:mantis	mantis	eq	0.10
mantis:mantis	mantis	eq	0.10.0
mantis:mantis	mantis	eq	0.10.1
mantis:mantis	mantis	eq	0.10.2
mantis:mantis	mantis	eq	0.11
mantis:mantis	mantis	eq	0.11.0