Gentoo Security Advisory GLSA 200809-10 (mantisbt)

The remote host is missing updates announced in advisory GLSA 200809-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3333

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

CVE-2008-3333

CVE-2008-3333 is a directory traversal vulnerability in MantisBT (core/lang_api.php) where the language parameter on account_prefs_update.php can be exploited to include and execute arbitrary files. Affected: MantisBT prior to 1.1.2. Root cause: improper validation of the language value leading t...