MantisBT Command Injection Vulnerability

MantisBT is a lightweight, free and open source, web-based defect tracking system. A command injection vulnerability exists in MantisBT versions prior to 1.3.20 and 2.22.1, which can be exploited by an authenticated attacker to achieve remote code execution...