Filter
AND
AND
AND
Mantisbt MantisbtThe string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an i…
5.8
First published (updated )
Mantisbt Mantisbtgpc_api.php in MantisBT 1.2.17 and earlier allows remote attackers to bypass authenticated via a pas…
First published (updated )
Mantisbt Mantisbtcore/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifica…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt MantisbtMantisBT before 1.2.12 does not use an expected default value during decisions about whether a user …
5.5
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users w…
4.9
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier fo…
6.4
First published (updated )
Mantisbt MantisbtThe access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.