Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mantisbt mantisbt 0.19.3 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-2938
Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT prior to 1.2.7 allow remote malicious users to inject arbitrary web script or HTML via a parameter, as demonstrated by the project_id parameter to search.php.
Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.4Mantisbt Mantisbt 1.2.5Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.6Mantisbt MantisbtMantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.3Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.0
4.3
CVSSv2
CVE-2011-3356
Multiple cross-site scripting (XSS) vulnerabilities in config_defaults_inc.php in MantisBT prior to 1.2.8 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO, as demonstrated by the PATH_INFO to (1) manage_config_email_page.php, (2) manage_config...
Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.3Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.4Mantisbt Mantisbt 1.2.5Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.0.7Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.1.0
6.8
CVSSv2
CVE-2011-3357
Directory traversal vulnerability in bug_actiongroup_ext_page.php in MantisBT prior to 1.2.8 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the action parameter, related to bug_actiongroup_page.php.
Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 1.0.7Mantisbt Mantisbt 1.1.6Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.2.5Mantisbt Mantisbt 1.2.6Mantisbt MantisbtMantisbt Mantisbt 1.1.1
4.3
CVSSv2
CVE-2011-3358
Multiple cross-site scripting (XSS) vulnerabilities in MantisBT prior to 1.2.8 allow remote malicious users to inject arbitrary web script or HTML via the (1) os, (2) os_build, or (3) platform parameter to (a) bug_report_page.php or (b) bug_update_advanced_page.php, related to us...
Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.5Mantisbt Mantisbt 1.2.6Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.6Mantisbt MantisbtMantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.2.3Mantisbt Mantisbt 1.2.4Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 0.19.4
4.3
CVSSv2
CVE-2011-3578
Cross-site scripting (XSS) vulnerability in bug_actiongroup_ext_page.php in MantisBT prior to 1.2.8 allows remote malicious users to inject arbitrary web script or HTML via the action parameter, related to bug_actiongroup_page.php, a different vulnerability than CVE-2011-3357.
Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.3Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.4Mantisbt Mantisbt 1.2.5Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 1.0.7Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.8
4.3
CVSSv2
CVE-2010-3763
Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT prior to 1.2.3 allows remote malicious users to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303.
Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 0.19.0a1Mantisbt Mantisbt 0.19.0a2Mantisbt Mantisbt 1.0.0a3Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.2.1Mantisbt MantisbtMantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 0.19.1Mantisbt Mantisbt 0.19.2Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 0.19.0Mantisbt Mantisbt 1.1.2
3.5
CVSSv2
CVE-2010-3303
Multiple cross-site scripting (XSS) vulnerabilities in MantisBT prior to 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) a plugin name, related to manage_plugin_uninstall.php; (2) an enumeration value or (3) a String value of a custo...
Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.2Mantisbt Mantisbt 1.0.0a1Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 0.19.5Mantisbt Mantisbt 1.1.6Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 0.19.0a2Mantisbt Mantisbt 0.19.0Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.0.7Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5
3.5
CVSSv2
CVE-2010-2802
Cross-site scripting (XSS) vulnerability in MantisBT prior to 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments.
Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 0.19.0Mantisbt Mantisbt 0.19.1Mantisbt Mantisbt 0.19.2Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.0a1Mantisbt Mantisbt 1.0.0a2Mantisbt Mantisbt 0.19.5
4.3
CVSSv2
CVE-2010-4348
Cross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php in MantisBT prior to 1.2.4 allows remote malicious users to inject arbitrary web script or HTML via the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.
Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 0.18.0Mantisbt Mantisbt 0.19.0a1Mantisbt Mantisbt 1.0.0a2Mantisbt Mantisbt 1.0.0a3Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.6Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.2Mantisbt Mantisbt 1.0.0a1Mantisbt Mantisbt 0.19.5Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.0.8
5.1
CVSSv2
CVE-2010-4350
Directory traversal vulnerability in admin/upgrade_unattended.php in MantisBT prior to 1.2.4 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Li...
Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 0.18.0Mantisbt Mantisbt 0.19.0a1Mantisbt Mantisbt 1.0.0a2Mantisbt Mantisbt 1.0.0a3Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.6Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.2Mantisbt Mantisbt 1.0.0a1Mantisbt Mantisbt 0.19.5Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.0.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook