Filter
AND
MantisBTbug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permis…
3.6
First published (updated )
MantisBTThe access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MantisBTmanage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter contain…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MantisBTUnspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0…
10
First published (updated )
MantisBTMantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attacke…
First published (updated )
MantisBTMantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MantisBTMantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack v…
7.2
First published (updated )
MantisBTUnspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display th…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MantisBTcore/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remo…
7.5
First published (updated )
MantisBTMantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardle…
First published (updated )