PT-2019-6863

Name of the Vulnerable Software and Affected Versions MantisBT version 1.2.13 Description A cross-site scripting XSS issue exists in the configuration report page, specifically in the adm config report.php file, allowing remote authenticated users to inject arbitrary web script or HTML via a...

PT-2017-17436

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.3.8 MantisBT versions prior to 2.1.2 MantisBT versions prior to 2.2.2 Description A cross-site scripting XSS issue exists in the MantisBT Configuration Report page, allowing remote attackers to inject arbitrary cod...

PT-2015-4132

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.13 through 1.2.17 Description A cross-site scripting XSS issue exists in the Configuration Report page, specifically in the "set configuration" box, allowing remote administrators to inject arbitrary web script or HTML...

PT-2019-6864

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.0rc1 through 1.2.14 Description A cross-site scripting issue exists in the configuration report page, allowing remote authenticated users to inject arbitrary web script or HTML via a complex value in the adm config...

PT-2014-4576

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.13 through 1.2.16 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the filter config id parameter in the manage configuration page, specifically in t...