340 matches found
MantisBT 'Content Security Policy' Security Bypass Vulnerability
MantisBT is the MantisBT team of a Web-based open source defect tracking system . A security bypass vulnerability exists in the MantisBT 'Content Security Policy'. An attacker could exploit the vulnerability to bypass security restrictions and obtain potentially sensitive information...
MantisBT 'adm_config_report.php' cross-site scripting vulnerability (CNVD-2015-01092)
MantisBT is a popular web-based bug tracking system written in PHP. A cross-site scripting vulnerability exists in MantisBT 'admconfigreport.php' due to the program failing to adequately filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or...
[SECURITY] [DSA 3120-1] mantis security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2015 http://www.debian.org/security/faq -...
MantisBT Not Fully Fixed Existence of Multiple URI Redirection Vulnerabilities
MantisBT is a popular web-based bug tracking system. MantisBT suffers from multiple URI redirection vulnerabilities that can be exploited by an attacker to redirect users to an attacker-controlled website by constructing a URI containing a malicious website and tricking them into clicking on it...
Mantis Bug Tracker 1.2.17 PHP Code Injection Vulnerability
Mantis Bug Tracker versions 1.2.0 through 1.2.17 suffer from a PHP code injection vulnerability. ----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote...
Mantis Bug Tracker 1.2.17 PHP Code Injection
----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote $this-source-issuelink, '/' . '\d+\b/e'; 111. $replacement = '"\1" . $this-getReplacementString "\2", "\3"...
Debian Security Advisory DSA 3030-1 (mantis - security update)
Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. OpenVAS Vulnerability Test $Id: deb3030.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 3030-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyrig...
Mantis Bug Tracker <= 1.1.3 - Remote Code Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX...
Design/Logic Flaw
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
CVE-2013-1883
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
EUVD-2010-4319
Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...
EUVD-2010-4318
admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...
DEBIAN-CVE-2010-3070
Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...
Mantis Bug Tracker <= 1.1.3 Remote Code Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX...
mantis-exec.txt
?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
Mantis Bug Tracker 1.1.3 - Remote Code Execution
Mantis Bug Tracker 1.1.3 - Remote Code Execution ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit --------------------------------------------------------------------------------...
Mantis Bug Tracker <= 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ========================================================= Mantis Bug Tracker = 1.1.3 Remote Code Execution Exploit ========================================================= ?php /...
Mantis Bug Tracker 1.1.3 - Remote Code Execution
?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
Mantis < 1.1.2 account_prefs_update.php language Parameter Traversal Local File Inclusion
Binary data 4605.prm...
Mantis Bug Tracker 1.1.1 (CE/XSS/CSRF) Multiple Vulnerabilities
No description provided by source. Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities Name Multiple Vulnerabilities in Mantis Systems Affected Mantis 1.1.1 and possibly earlier versions Severity High Impact CVSSv2 High 9/10, vector: AV:N/AC:L/Au:N/C:C/I:P/A:P Vendor http://www.mantisbt.org/ Adviso...