CVE-2010-4350: Path Traversal
Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4350?
CVE-2010-4350 is categorized as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2010-4350?
To fix CVE-2010-4350, upgrade MantisBT to version 1.2.4 or later, which addresses the directory traversal vulnerability.
What is the impact of CVE-2010-4350?
CVE-2010-4350 allows remote attackers to include and execute arbitrary local files, leading to potential system compromise.
Which versions of MantisBT are affected by CVE-2010-4350?
All MantisBT versions prior to 1.2.4, including versions 0.18.0 through 1.2.3, are affected by CVE-2010-4350.
Is CVE-2010-4350 related to any specific function in MantisBT?
Yes, CVE-2010-4350 is related to an unsafe call to a function in the ADOdb Library for PHP present in MantisBT.