Mantis <= 1.1.1 LFI

LFI Vulnerability in language parameter. This exploit is dangerous. Because the LFI is done with require on a value saved in SQL, if the path is non-existent, the user account will be broken. Additionally, this value must be = 32chars MySQL vachar32 Vulnerability Type: Local File Include For the...

Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities

Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities Name Multiple Vulnerabilities in Mantis Systems Affected Mantis 1.1.1 and possibly earlier versions Severity High Impact CVSSv2 High 9/10, vector: AV:N/AC:L/Au:N/C:C/I:P/A:P Vendor http://www.mantisbt.org/ Advisory...

CVE-2008-2276

Cross-site request forgery CSRF vulnerability in manageusercreate.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link...

CVE-2008-2276

CVE-2008-2276 is a CSRF vulnerability in Mantis 1.1.1 (manage_user_create.php) that lets an attacker create new administrative users via a crafted link. OpenVAS/Fedora entries indicate updates were released (e.g., FEDORA-2008-6647/6657) to address mantis; no further technical exploit details are ...

CVE-2008-2276

Cross-site request forgery CSRF vulnerability in manageusercreate.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link...