Debian Security Advisory DSA 153-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 153-1. OpenVAS Vulnerability Test $Id: deb1531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 153-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2002-1114

CVE-2002-1114 affects MantisBT prior to 0.17.4. The issue allows remote attackers to execute arbitrary code or read arbitrary files via config_inc2.php by supplying values for g_bottom_include_page, g_top_include_page, g_css_include_file, g_meta_include_file, or via a cookie. The vulnerability pa...