Filters
Mantisbt MantisbtThe string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an i…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt Mantisbtgpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a pas…
First published (updated )
Mantisbt Mantisbtcore/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifica…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt MantisbtMantisBT before 1.2.12 does not use an expected default value during decisions about whether a user …
5.5
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users w…
4.9
First published (updated )
Mantisbt MantisbtThe mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows …
7.5
First published (updated )
Mantisbt Mantisbtbug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permis…
3.6
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier fo…
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt MantisbtThe SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete a…
3.6
First published (updated )
Mantisbt MantisbtThe access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly …
4.3
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security…
3.6
First published (updated )
Mantisbt MantisbtThe mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.