Filter
AND
AND
AND
Mantisbt MantisbtThe string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an i…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt Mantisbtbug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the …
First published (updated )
Mantisbt Mantisbtcore/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running under t…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt MantisbtMantisBT before 1.2.18 uses the public_key parameter value as the key to the CAPTCHA answer, which a…
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.18 allows remote authenticated users to bypass the $g_download_attachments_thres…
First published (updated )
Mantisbt MantisbtThe XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attacke…
6.4
First published (updated )
Mantisbt Mantisbtgpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a pas…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.