CVE-2010-4350

CVE-2010-4350 affects MantisBT prior to 1.2.4 and is a directory traversal flaw in admin/upgrade_unattended.php that allows remote inclusion of local files via db_type, due to unsafe ADOdb usage. Impact per CVSS: partial disclosure/integrity/availability (base 5.1, MEDIUM). Gentoo/OpenVAS advisor...