SQL Injection

MantisBT is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of the historyorder configuration value in the SQL ORDER BY clause, which allows an attacker with administrative privileges to inject arbitrary SQL statements that execute when users view bug history...

MantisBT: SQL Injection via history_order Configuration Value

MantisBT 2.28.3 and earlier versions contains a SQL injection vulnerability in core/historyapi.php. The historyorder configuration value is concatenated directly into a SQL ORDER BY clause without any sanitisation, parameterization, or validation against a whitelist. An administrator can set this...

PT-2026-60355

MantisBT 2.28.3 and earlier versions contains a SQL injection vulnerability in core/history api.php. The history order configuration value is concatenated directly into a SQL ORDER BY clause without any sanitisation, parameterization, or validation against a whitelist. An administrator can set th...

Mozilla Firefox Remote Command Execution

Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under window.pkcs11: long addmodulein DOMString moduleName, in DOMString libraryFullPath, in lo...

CVE-2004-2666: Undefined Security Weakness

Mantis before 20041016 provides a complete Issue History Bug History in the web interface regardless of viewhistorythreshold, which allows remote attackers to obtain sensitive information private bug details by visiting a bug's web page...