MantisBT 1.2.13 - 1.2.17 XSS Vulnerability - Linux

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

MantisBT Configuration Report Page Cross-Site Scripting Vulnerability

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in the 'set configuration' text box in the Configuration Report page in...

CVE-2014-8987

Cross-site scripting XSS vulnerability in the "set configuration" box in the Configuration Report page admconfigreport.php in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via the configoption parameter, a different vulnerability than...

Cross site scripting

Cross-site scripting XSS vulnerability in the "set configuration" box in the Configuration Report page admconfigreport.php in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via the configoption parameter, a different vulnerability than...

CVE-2014-8987

Summary (from connected sources): MantisBT versions 1.2.13–1.2.17 contain a cross-site scripting (XSS) vulnerability in the Configuration Report page (adm_config_report.php), exploitable via the config_option parameter, allowing remote administrators to inject arbitrary web script or HTML. The is...

MantisBT Information Disclosure Vulnerability (CNVD-2015-04534)

MantisBT is a popular web-based bug tracking system written in PHP. MantisBT suffers from an information disclosure vulnerability that allows an attacker to exploit this vulnerability to obtain sensitive information...

MantisBT Arbitrary File Download Vulnerability

MantisBT is a PHP language development, open source problem management system , to achieve a delicate balance between simplicity and functionality . MantisBT suffers from an arbitrary file download vulnerability. Because the program fails to filter user-supplied data, an attacker can exploit the...

MantisBT SQL Injection Vulnerability (CNVD-2015-04521)

MantisBT is a PHP language development, open source problem management system , to achieve a delicate balance between simplicity and functionality . MantisBT suffers from a SQL injection vulnerability. Because the program fails to filter user-supplied data, an attacker can exploit the vulnerabili...

MantisBT 1.3.0 File Download

| Title : Mantis 1.3.0 Bug Trackers File Download Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by MantisBT 1.3.0-rc1-dev master-5ee4075 | Tested on: windows 8.1 Français V.Pro | Download : https://www.mantisbt.org ======================================= p...

MantisBT 1.3.0-beta.1 Multiple Vulnerabilities

Binary data 8907.prm...

MantisBT 1.2.13 <= 1.2.19 XSS

Binary data 8678.prm...

MantisBT Detection

Binary data 8680.prm...

MantisBT < 1.2.18 Multiple Vulnerabilities

Binary data 8891.prm...

MantisBT 1.2.13 < 1.2.18 XSS

Binary data 8906.prm...

MantisBT 1.2.x < 1.2.19 Multiple Vulnerabilities

Binary data 8903.prm...

MantisBT 1.2.x < 1.2.18 Multiple Vulnerabilities

Binary data 8905.prm...

MantisBT 1.1.0 < 1.2.16 Multiple Vulnerabilities

Binary data 8900.prm...

MantisBT 1.1.x < 1.2.18 Multiple Vulnerabilities

Binary data 8902.prm...

MantisBT 1.2.13 < 1.2.17 SQLi

Binary data 8901.prm...

CVE-2015-1042

The stringsanitizeurl function in core/stringapi.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" colon slash separator in the return parameter to loginpage.php, a differe...