PT-2015-5033

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.0a3 through 1.2.18 Description The issue arises from an incorrect regular expression used in the string sanitize url function, allowing remote attackers to conduct open redirect and phishing attacks. This can be achieved ...