Filter
Software
Mantis MantisMantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remot…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisMantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), wh…
First published (updated )
Mantis MantisMantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis Mantismanage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter contain…
First published (updated )
Mantis MantisUnspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
John Lim ADOdbDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, …
7.5
First published (updated )
Mantis MantisUnspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisMantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has…
First published (updated )
Mantis MantisMantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attacke…
First published (updated )
Mantis MantisMantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisMantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack v…
7.2
First published (updated )
Mantis MantisUnspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display th…
First published (updated )
Mantis MantisPHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.