Where
-Infinity
0

Vendor Risk Score

See how mantis compares to other vendors in security performance

View Risk Score →

Mantis MantisMantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remot…

Risk 52
Severity
7.5
First published (updated )

Mantis MantisInfoleak

Risk 26
Severity
5
First published (updated )

Mantis MantisCode Injection

Risk 78
Severity
9
First published (updated )

Mantis MantisCode Injection

Risk 46
Severity
6.5
First published (updated )

Mantis MantisXSS

Risk 18
Severity
3.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mantis MantisPath Traversal

Risk 53
Severity
7.5
First published (updated )

Mantis MantisXSS

Risk 23
Severity
4.3
First published (updated )

redhat/1.1.0XSS

Risk 22
Severity
4.3
First published (updated )

Mantis MantisMantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), wh…

Risk 26
Severity
5
First published (updated )

Mantis MantisMantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a…

Risk 87
Severity
10
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mantis MantisXSS

Risk 47
Severity
6.8
First published (updated )

Mantis Mantismanage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter contain…

Risk 26
Severity
5
First published (updated )

Mantis MantisXSS

Risk 22
Severity
4.3
First published (updated )

Mantis MantisXSS

Risk 22
Severity
4.3
First published (updated )

Mantis MantisUnspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0…

Risk 87
Severity
10
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

John Lim adodbSQL Injection

Risk 52
Severity
7.5
First published (updated )

John Lim adodbDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, …

Risk 52
Severity
7.5
First published (updated )

Mantis MantisUnspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown …

Risk 26
Severity
5
First published (updated )

Mantis MantisCRLF Injection

Risk 26
Severity
5
First published (updated )

Mantis MantisSQL Injection

Risk 52
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mantis MantisMantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has…

Risk 26
Severity
5
First published (updated )

Mantis MantisMantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attacke…

Risk 26
Severity
5
First published (updated )

Mantis MantisMantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying…

Risk 52
Severity
7.5
First published (updated )

Mantis MantisXSS

Risk 22
Severity
4.3
First published (updated )

Mantis MantisXSS

Risk 22
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Mantis MantisMantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack v…

Risk 63
Severity
7.2
First published (updated )

Mantis MantisXSS

Risk 22
Severity
4.3
First published (updated )

Mantis MantisSQL Injection

Risk 52
Severity
7.5
First published (updated )

Mantis MantisUnspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display th…

Risk 26
Severity
5
First published (updated )

Mantis MantisPHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 …

Risk 52
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203