Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MantisMantis0.10.1

13 matches found

CVE
CVE•added 2006/02/22 2:2 a.m.•55 views

CVE-2006-0840

manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE:...

5CVSS6.7AI score0.0214EPSS
CVE
CVE•added 2005/09/28 10:3 p.m.•53 views

CVE-2005-3091

Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".

4.3CVSS5.4AI score0.00427EPSS
CVE
CVE•added 2005/12/28 1:3 a.m.•53 views

CVE-2005-4519

Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_...

7.5CVSS8.2AI score0.0214EPSS
CVE
CVE•added 2005/12/14 11:3 a.m.•48 views

CVE-2005-4238

Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.

4.3CVSS5.4AI score0.04246EPSS
CVE
CVE•added 2008/07/27 11:41 p.m.•48 views

CVE-2008-3333

Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).

7.5CVSS7AI score0.00401EPSS
Web
CVE
CVE•added 2008/07/27 11:41 p.m.•47 views

CVE-2008-3332

Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.

6.5CVSS7.2AI score0.08304EPSS
CVE
CVE•added 2006/02/22 2:2 a.m.•46 views

CVE-2006-0841

Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide_status, (2) handler_id, (3) user_monitor, (4) reporter_id, (5) view_type, (6) show_severity, (7) show_category, (8) show_status, (9) show_...

4.3CVSS5.5AI score0.10749EPSS
CVE
CVE•added 2005/02/26 5:0 a.m.•43 views

CVE-2004-1730

Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_s...

4.3CVSS5.7AI score0.00622EPSS
CVE
CVE•added 2005/12/28 1:3 a.m.•43 views

CVE-2005-4523

Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.

5CVSS6.5AI score0.00763EPSS
CVE
CVE•added 2006/12/15 7:0 p.m.•41 views

CVE-2004-2666

Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.

5CVSS6.5AI score0.00333EPSS
CVE
CVE•added 2008/07/27 11:41 p.m.•41 views

CVE-2008-3331

Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter.

3.5CVSS5.4AI score0.00682EPSS
CVE
CVE•added 2005/02/26 5:0 a.m.•37 views

CVE-2004-1731

signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.

5CVSS6.7AI score0.04264EPSS
CVE
CVE•added 2008/01/23 12:0 p.m.•33 views

CVE-2008-0404

Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary.

4.3CVSS5.4AI score0.00733EPSS