Mantis < 1.0.0rc2 Multiple Vulnerabilities

According to its banner, the version of Mantis on the remote host fails to sanitize user-supplied input to the 'gdbtype' parameter of the 'core/databaseapi.php' script. Provided PHP's 'registerglobals' setting is enabled, an attacker may be able to exploit this to connect to arbitrary databases a...