Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown
CVE-2008-3331
Disclosure Date: July 27, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter.
0
Attacker Value
Unknown
CVE-2008-3332
Disclosure Date: July 27, 2008 (last updated October 04, 2023)
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
0
Attacker Value
Unknown
CVE-2008-3333
Disclosure Date: July 27, 2008 (last updated October 04, 2023)
Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).
0
Attacker Value
Unknown
CVE-2008-0404
Disclosure Date: January 23, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary.
0
Attacker Value
Unknown
CVE-2005-4523
Disclosure Date: December 28, 2005 (last updated February 22, 2025)
Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.
0
Attacker Value
Unknown
CVE-2005-4519
Disclosure Date: December 28, 2005 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_all_set.php.
0
Attacker Value
Unknown
CVE-2005-4238
Disclosure Date: December 14, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
0
Attacker Value
Unknown
CVE-2005-3091
Disclosure Date: September 28, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".
0
Attacker Value
Unknown
CVE-2004-1730
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_set.php.
0
Attacker Value
Unknown
CVE-2004-2666
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.
0
