Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mantisbt mantisbt 1.2.0a1 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2008-3102
Mantis 1.1.x up to and including 1.1.2 and 1.2.x up to and including 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote malicious users to capture this cookie.
Mantisbt Mantisbt 1.2.0a1Mantisbt Mantisbt 1.2.0a2Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2
2.6
CVSSv2
CVE-2014-9269
Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 up to and including 1.2.x prior to 1.2.18, when Extended project browser is enabled, allows remote malicious users to inject arbitrary web script or HTML via the project cookie.
Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.2.4Mantisbt Mantisbt 1.2.5Mantisbt Mantisbt 1.2.12Mantisbt Mantisbt 1.2.13Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.1.9Mantisbt Mantisbt 1.2.0a2Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.2.8Mantisbt Mantisbt 1.2.9Mantisbt Mantisbt 1.2.17Mantisbt Mantisbt 1.1.6Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.2.0a1Mantisbt Mantisbt 1.2.6Mantisbt Mantisbt 1.2.7Mantisbt Mantisbt 1.2.14
4.3
CVSSv2
CVE-2012-1118
The access_has_bug_level function in core/access_api.php in MantisBT prior to 1.2.9 does not properly restrict access when the private_bug_view_threshold is set to an array, which allows remote malicious users to bypass intended restrictions and perform certain operations on priv...
Mantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.0a2Mantisbt Mantisbt 0.19.0Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.2.0a1Mantisbt Mantisbt 1.2.7Mantisbt Mantisbt 0.19.1Mantisbt Mantisbt 0.19.2Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.6Mantisbt Mantisbt 1.0.7Mantisbt Mantisbt 1.1.6Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4
3.6
CVSSv2
CVE-2012-1122
bug_actiongroup.php in MantisBT prior to 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users with the report_bug_threshold and move_bug_threshold privileges for a project to b...
Mantisbt Mantisbt 1.0.1Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.0.7Mantisbt Mantisbt 1.0.4Mantisbt Mantisbt 1.1.7Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 0.19.0a1Mantisbt Mantisbt 0.19.0a2Mantisbt Mantisbt 1.2.5Mantisbt MantisbtMantisbt Mantisbt 0.19.4Mantisbt Mantisbt 0.19.3Mantisbt Mantisbt 1.0.5Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.0a2Mantisbt Mantisbt 0.19.0Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.8Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.0.6
7.5
CVSSv2
CVE-2014-8554
SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT prior to 1.2.18 allows remote malicious users to execute arbitrary SQL commands via the project_id parameter. NOTE: this vulnerability exists because of an incomplete...
Mantisbt Mantisbt 1.2.9Mantisbt Mantisbt 1.2.8Mantisbt MantisbtMantisbt Mantisbt 1.2.3Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.11Mantisbt Mantisbt 1.2.10Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.1.3Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.0.3Mantisbt Mantisbt 1.0.2Mantisbt Mantisbt 1.0.0Mantisbt Mantisbt 1.2.16Mantisbt Mantisbt 1.2.1Mantisbt Mantisbt 1.2.0a2Mantisbt Mantisbt 1.2.0a1Mantisbt Mantisbt 1.1.9Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.0.9
4.3
CVSSv2
CVE-2014-9272
The string_insert_href function in MantisBT 1.2.0a1 up to and including 1.2.x prior to 1.2.18 does not properly validate the URL protocol, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via the javascript:// protocol.
Debian Debian Linux 7.0Mantisbt Mantisbt 1.1.0Mantisbt Mantisbt 1.1.1Mantisbt Mantisbt 1.1.8Mantisbt Mantisbt 1.1.9Mantisbt Mantisbt 1.2.10Mantisbt Mantisbt 1.2.11Mantisbt Mantisbt 1.2.2Mantisbt Mantisbt 1.2.3Mantisbt Mantisbt 1.1.4Mantisbt Mantisbt 1.1.5Mantisbt Mantisbt 1.2.0Mantisbt Mantisbt 1.2.14Mantisbt Mantisbt 1.2.15Mantisbt Mantisbt 1.2.6Mantisbt Mantisbt 1.2.7Mantisbt Mantisbt 1.1.2Mantisbt Mantisbt 1.1.3Mantisbt Mantisbt 1.2.12Mantisbt Mantisbt 1.2.13Mantisbt Mantisbt 1.2.4Mantisbt Mantisbt 1.2.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook