341 matches found
Mantis Bug Tracker Filter API view_type Cross Site Scripting (CVE-2016-6837)
A cross-site scripting vulnerability exists in the Filter API component of Mantis Bug Tracker. The vulnerability is due to insufficient input validation on the viewtype parameter in viewallbugpage.php. A remote attacker could exploit this vulnerability by enticing authenticated users to click on ...
MantisBT 'Content Security Policy' Security Bypass Vulnerability
MantisBT is the MantisBT team of a Web-based open source defect tracking system . A security bypass vulnerability exists in the MantisBT 'Content Security Policy'. An attacker could exploit the vulnerability to bypass security restrictions and obtain potentially sensitive information...
MantisBT 'adm_config_report.php' cross-site scripting vulnerability (CNVD-2015-01092)
MantisBT is a popular web-based bug tracking system written in PHP. A cross-site scripting vulnerability exists in MantisBT 'admconfigreport.php' due to the program failing to adequately filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or...
[SECURITY] [DSA 3120-1] mantis security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2015 http://www.debian.org/security/faq -...
MantisBT Not Fully Fixed Existence of Multiple URI Redirection Vulnerabilities
MantisBT is a popular web-based bug tracking system. MantisBT suffers from multiple URI redirection vulnerabilities that can be exploited by an attacker to redirect users to an attacker-controlled website by constructing a URI containing a malicious website and tricking them into clicking on it...
Mantis Bug Tracker 1.2.17 PHP Code Injection Vulnerability
Mantis Bug Tracker versions 1.2.0 through 1.2.17 suffer from a PHP code injection vulnerability. ----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote...
Mantis Bug Tracker 1.2.17 PHP Code Injection
----------------------------------------------------------------------------- Mantis Bug Tracker $newId 108. $bugData = bugget $newId, true ; 109. 110. $bugLinkRegexp = '/^|^\w' . pregquote $this-source-issuelink, '/' . '\d+\b/e'; 111. $replacement = '"\1" . $this-getReplacementString "\2", "\3"...
Debian Security Advisory DSA 3030-1 (mantis - security update)
Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. OpenVAS Vulnerability Test $Id: deb3030.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 3030-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyrig...
Mantis Bug Tracker <= 1.1.3 - Remote Code Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX...
Design/Logic Flaw
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
CVE-2013-1883
Mantis Bug Tracker aka MantisBT 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service resource consumption via a filter using a criteria, text search, and the "any condition" match type...
EUVD-2010-4318
admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...
EUVD-2010-4319
Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...
DEBIAN-CVE-2010-3070
Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...
mantis-exec.txt
?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
Mantis Bug Tracker <= 1.1.3 Remote Code Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX...
Mantis Bug Tracker 1.1.3 - Remote Code Execution
?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
Mantis Bug Tracker <= 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ========================================================= Mantis Bug Tracker = 1.1.3 Remote Code Execution Exploit ========================================================= ?php /...
Mantis Bug Tracker 1.1.3 - Remote Code Execution
Mantis Bug Tracker 1.1.3 - Remote Code Execution ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit --------------------------------------------------------------------------------...
