CVE-2018-6382

MantisBT 2.10.0 is affected by a local SQL injection via the vendor/adodb/adodb-php/server.php sql parameter accessible to 127.0.0.1. The issue is described as exploitable by local users; vendor notes no authentication bypass and disputes the report’s significance. OpenVAS entries for both Window...

PT-2018-17520 · Mantisbt · Mantisbt

Name of the Vulnerable Software and Affected Versions: MantisBT version 2.10.0 Description: The issue allows local users to conduct SQL Injection attacks via the sql parameter in a request to the server.php endpoint, accessible from the 127.0.0.1 IP address. It is worth noting that the vendor...

MantisBT Security Bypass Vulnerability (CNVD-2017-33719)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A security vulnerability exists in versions of MantisBT prior to 1.2.19. An attacker can exploit the vulnerability t...

Design/Logic Flaw

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

CVE-2014-9624

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

CVE-2014-9624

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

CVE-2014-9624

CVE-2014-9624 affects MantisBT versions earlier than 1.2.19, where a CAPTCHA bypass vulnerability exists. Multiple sources (CNVD-2017-33719, UB Ubuntu CVE page, NVD entry) describe that an attacker can bypass CAPTCHA testing by obtaining unlimited CAPTCHA samples with perturbations for the same c...

CVE-2014-9624

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

MantisBT 1.2.13 - 1.2.19 'adm_config_report.php' XSS Vulnerability - Linux

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

MantisBT 1.2.13 - 1.2.19 'adm_config_report.php' XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-30553)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in MantisBT versions 1.2.13 through 1.2.20 excluding version 1.2.20. A...

CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

Cross site scripting

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

CVE-2015-2046

CVE-2015-2046 affects MantisBT 1.2.13 and later up to, but excluding, 1.2.20. The vulnerability is a cross-site scripting (XSS) flaw in the web UI (notably affecting the adm_config_report.php flow) that can allow injection of arbitrary JavaScript. Root cause is inadequate input/output sanitizatio...

MySQL/MariaDB MantisBT Task File Read Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability in MantisBT on MySQL/MariaDB allows remote attackers to exploit the vulnerability by submitting a special request to access files on the MantisBT server...

MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-28224)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in MantisBT versions prior to 1.2.19 and prior to 1.3.0-beta.2. A remote...

Cross site scripting

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...