CVE-2014-8987

Cross-site scripting XSS vulnerability in the "set configuration" box in the Configuration Report page admconfigreport.php in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via the configoption parameter, a different vulnerability than...

Cross site scripting

Cross-site scripting XSS vulnerability in the "set configuration" box in the Configuration Report page admconfigreport.php in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via the configoption parameter, a different vulnerability than...

CVE-2014-8987

Summary (from connected sources): MantisBT versions 1.2.13–1.2.17 contain a cross-site scripting (XSS) vulnerability in the Configuration Report page (adm_config_report.php), exploitable via the config_option parameter, allowing remote administrators to inject arbitrary web script or HTML. The is...

MantisBT Arbitrary File Download Vulnerability

MantisBT is a PHP language development, open source problem management system , to achieve a delicate balance between simplicity and functionality . MantisBT suffers from an arbitrary file download vulnerability. Because the program fails to filter user-supplied data, an attacker can exploit the...

MantisBT SQL Injection Vulnerability (CNVD-2015-04521)

MantisBT is a PHP language development, open source problem management system , to achieve a delicate balance between simplicity and functionality . MantisBT suffers from a SQL injection vulnerability. Because the program fails to filter user-supplied data, an attacker can exploit the vulnerabili...

MantisBT Information Disclosure Vulnerability (CNVD-2015-04534)

MantisBT is a popular web-based bug tracking system written in PHP. MantisBT suffers from an information disclosure vulnerability that allows an attacker to exploit this vulnerability to obtain sensitive information...

MantisBT 1.3.0 File Download

| Title : Mantis 1.3.0 Bug Trackers File Download Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by MantisBT 1.3.0-rc1-dev master-5ee4075 | Tested on: windows 8.1 Français V.Pro | Download : https://www.mantisbt.org ======================================= p...

MantisBT 1.3.0-beta.1 Multiple Vulnerabilities

Binary data 8907.prm...

MantisBT 1.2.13 <= 1.2.19 XSS

Binary data 8678.prm...

MantisBT Detection

Binary data 8680.prm...

MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities

Binary data 8903.prm...

MantisBT 1.2.x < 1.2.18 Multiple Vulnerabilities

Binary data 8905.prm...

MantisBT 1.1.0 < 1.2.16 Multiple Vulnerabilities

Binary data 8900.prm...

MantisBT 1.2.13 < 1.2.18 XSS

Binary data 8906.prm...

MantisBT < 1.2.18 Multiple Vulnerabilities

Binary data 8891.prm...

MantisBT 1.1.x < 1.2.18 Multiple Vulnerabilities

Binary data 8902.prm...

MantisBT 1.2.13 < 1.2.17 SQLi

Binary data 8901.prm...

CVE-2015-1042

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...

CVE-2015-1042

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...

Open redirect

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...