Filters
Software
Mantis MantisMantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), wh…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis Mantismanage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter contain…
First published (updated )
Mantis MantisUnspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisMantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has…
First published (updated )
Mantis MantisMantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attacke…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisUnspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display th…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisMantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardle…
First published (updated )
Mantis Mantissignup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multip…
First published (updated )
Mantis MantisMantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifyin…
First published (updated )
Mantis Mantisprint_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, whic…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantis MantisMantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID…
First published (updated )