aeiou.pt Cross Site Scripting vulnerability OBB-611055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| aeiou.pt ---|--- Open Bug Bounty...

Mantis < 1.1.4 HTTPS Session Cookie Secure Flag Weakness

Binary data 4694.prm...

CVE-2004-2666

Mantis before 20041016 provides a complete Issue History Bug History in the web interface regardless of viewhistorythreshold, which allows remote attackers to obtain sensitive information private bug details by visiting a bug's web page...

CVE-2002-1111

printallbugpage.php in Mantis 0.17.3 and earlier does not verify the limitreporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted...

CVE-2002-1113

summarygraphfunctions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the gjpgraphpath parameter to reference the location of the PHP code...

CVE-2003-0499

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations...

CVE-2002-1114

configinc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters 1 gbottomincludepage, 2 gtopincludepage, 3 gcssincludefile, 4 gmetaincludefile, or 5 a cookie...

CVE-2002-1111

printallbugpage.php in Mantis 0.17.3 and earlier does not verify the limitreporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted...

CVE-2002-1116

The "View Bugs" page viewallbugpage.php in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects...

CVE-2002-1113

summarygraphfunctions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the gjpgraphpath parameter to reference the location of the PHP code...

CVE-2002-1114

configinc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters 1 gbottomincludepage, 2 gtopincludepage, 3 gcssincludefile, 4 gmetaincludefile, or 5 a cookie...

[Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis

Mantis Advisory/2002-01 SQL poisoning vulnerability in Mantis 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source web-based bugtracking system, written i...

[Mantis Advisory/2002-05] Arbitrary code execution and file reading vulnerability in Mantis

Mantis Advisory/2002-05 Arbitrary code execution and file reading vulnerability in Mantis 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 5.1 Arbitrary code execution 5.2 Displaying local files 6. Credit 7...