Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting...

Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution

Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution source: https://www.securityfocus.com/bid/10993/info Mantix is reportedly susceptible to a remote server-side script execution vulnerability. This vulnerability only presents itself when PHP is configured on the hosting computer with...

Mantis Bug Tracker 0.x - New Account Signup Mass Emailing

source: https://www.securityfocus.com/bid/10995/info Mantis is reportedly susceptible to a vulnerability in its signup process allowing mass email attacks. When a new user signs up to Mantis, the system automatically sends an email message to the given email address. This email contains the users...

Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution

source: https://www.securityfocus.com/bid/10993/info Mantix is reportedly susceptible to a remote server-side script execution vulnerability. This vulnerability only presents itself when PHP is configured on the hosting computer with 'registerglobals = on'. When PHP is configured to register glob...

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...

Mantis Bug Tracker 0.x - New Account Signup Mass Emailing

Mantis Bug Tracker 0.x - New Account Signup Mass Emailing source: https://www.securityfocus.com/bid/10995/info Mantis is reportedly susceptible to a vulnerability in its signup process allowing mass email attacks. When a new user signs up to Mantis, the system automatically sends an email message...

RT: Request Tracker 'ShowConfigTab' Security Bypass

Binary data 5078.prm...

SP Research Labs Advisory 12

SP Research Labs Advisory x12 ----------------------------- BNBT BitTorrent Tracker Denial Of Service ----------------------------------------- Versions: cbtt7520040515 Beta 7.5 Release 2 and prior versions Vendors: http://bnbt.go-dedicated.com/ http://bnbteasytracker.sourceforge.net/...

CVE-2004-2029

The UtilDecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service crash via a Basic Authorization HTTP request with a "A==" value...

[Full-Disclosure] BNBT BitTorrent Tracker Denial Of Service

SP Research Labs Advisory x12 ----------------------------- BNBT BitTorrent Tracker Denial Of Service ----------------------------------------- Versions: cbtt7520040515 Beta 7.5 Release 2 and prior versions Vendors: http://bnbt.go-dedicated.com/ http://bnbteasytracker.sourceforge.net/...

Check Point Smartview Tracker buffer overflow

Buffer overflow in GUI during viewing oversized column...

Check Point SmartDashboard Buffer Overflow

MegaHz Security Advisory 19/03/2004 Check Point SmartDashboard Buffer Overflow Summary =================== The Check Point Smartview Tracker which is the log viewer for Check Point Firewall-1 is suffering from buffer overflow vulnerabilities to various of its fields. Systems Affected...

CVE-2003-0273

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

CVE-2003-0273

The CVE-2003-0273 entry describes a cross-site scripting (XSS) vulnerability in the web interface of Request Tracker (RT) versions 1.0 through 1.0.7, allowing remote attackers to execute script via message bodies. CVSS v2 base metrics indicate a Medium impact with Partial confidentiality, integri...

CVE-2003-0273

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

CVE-2003-0273: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

[Mantis Advisory/2002-03] Bug listings of private projects can be viewed through cookie manipulation

Mantis Advisory/2002-03 Bug listings of private projects can be viewed through cookie manipulation 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source...

Mantis Bug Tracker 0.15.x0.160.17.x - JPGraph Remote File Inclusion Command Execution

Mantis Bug Tracker 0.15.x0.160.17.x - JPGraph Remote File Inclusion Command Execution source: https://www.securityfocus.com/bid/5504/info Mantis depends on include files to provide some functionality, such as dynamic generation of graphs. However, since Mantis does not properly validate the path ...

Mantis Bug Tracker 0.15.x/0.16/0.17.x - JPGraph Remote File Inclusion Command Execution

source: https://www.securityfocus.com/bid/5504/info Mantis depends on include files to provide some functionality, such as dynamic generation of graphs. However, since Mantis does not properly validate the path to the include file, it is possible for attackers to specify an arbitrary path, either...

CVE-1999-1404

IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service resource exhaustion via malformed data to the localtracker client port 5011, which prevents the connection from being closed properly...