26 matches found
MantisBT 1.2.x < 1.2.19 Open Redirect Vulnerability - Linux
MantisBT is prone to an open redirect vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
MantisBT 1.1.x < 1.2.18 Multiple Vulnerabilities
Binary data 8902.prm...
MantisBT Information Disclosure Vulnerability
MantisBT is a popular web-based bug tracking system. Versions prior to MantisBT 1.2.18 failed to properly check permissions when monitoring an issue related to another issue sending an email, allowing remote authenticated users to access sensitive information about restricted issues...
Mantis Bug Tracker 1.2.17 PHP Code Injection
----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote $this-source-issuelink, '/' . '\d+\b/e'; 111. $replacement = '"\1" . $this-getReplacementString "\2", "\3"...
CVE-2014-8988
MantisBT before 1.2.18 allows remote authenticated users to bypass the $gdownloadattachmentsthreshold and $gviewattachmentsthreshold restrictions and read attachments for private projects by leveraging access to a project that does not restrict access to attachments and a request to the download...
Mandriva Linux Security Advisory : wireshark (MDVSA-2011:118)
This advisory updates wireshark to the latest version 1.2.18, fixing one security issue : The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service infinite loop via malformed packets CVE-2011-2597...