Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

MantisBT mantisbtThe mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check …

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

The mcissuenoteupdate function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request.

First published (updated )
CVE-2012-2691

MantisBT mantisbtThe mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows …

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

The mcichecklogin function in api/soap/mcapi.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password.

First published (updated )
CVE-2012-1123

MantisBT mantisbtMantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier fo…

Risk 40
Severity
6.4
AV:N/AC:L/Au:N/C:N/I:P/A:P

MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection.

First published (updated )
CVE-2012-1119

MantisBT mantisbtMantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users w…

Risk 30
Severity
4.9
AV:N/AC:M/Au:S/C:N/I:P/A:P

MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories.

First published (updated )
CVE-2012-1121

MantisBT mantisbtMantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security…

Risk 24
Severity
3.6
AV:N/AC:H/Au:S/C:N/I:P/A:P

MantisBT before 1.2.11 does not check the deleteattachmentsthreshold permission when formsecurityvalidation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments.

First published (updated )
CVE-2012-2692

MantisBT mantisbtThe SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete a…

Risk 24
Severity
3.6
AV:N/AC:H/Au:S/C:N/I:P/A:P

The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnoteallowusereditdelete and deletebugthreshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports and bug notes.

First published (updated )
CVE-2012-1120

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203