PT-2014-8921

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.1.0a3 through 1.2.x before 1.2.18 Description The issue allows remote attackers to obtain database credentials. This is achieved by exploiting the print test result function in admin/upgrade unattended.php using a URL in th...

PT-2011-1511

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the db type parameter in the admin/upgrade unattended.php file. This is related to an...