Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mantisbt mantisbt 2.1.0 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2017-7620
MantisBT prior to 1.3.11, 2.x prior to 2.3.3, and 2.4.x prior to 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \/ substring as introducing either a local pathname or a remote hostname, which leads to (1) arbitrary P...
Mantisbt Mantisbt 2.4.0
Mantisbt Mantisbt 2.0.1
Mantisbt Mantisbt 2.0.0
Mantisbt Mantisbt 2.1.0
Mantisbt Mantisbt
Mantisbt Mantisbt 2.1.1
Mantisbt Mantisbt 2.2.0
Mantisbt Mantisbt 2.1.2
Mantisbt Mantisbt 2.2.2
Mantisbt Mantisbt 2.2.3
Mantisbt Mantisbt 2.2.4
1 EDB exploit
4.3
CVSSv2
CVE-2017-12062
An XSS issue exists in manage_user_page.php in MantisBT 2.x prior to 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote malicious users to execute arbitrary JavaScript code if CSP is disabled.
Mantisbt Mantisbt 2.5.1
Mantisbt Mantisbt 2.3.3
Mantisbt Mantisbt 2.3.1
Mantisbt Mantisbt 2.2.1
Mantisbt Mantisbt 2.2.3
Mantisbt Mantisbt 2.5.0
Mantisbt Mantisbt 2.4.2
Mantisbt Mantisbt 2.4.1
Mantisbt Mantisbt 2.4.0
Mantisbt Mantisbt 2.2.4
Mantisbt Mantisbt 2.1.0
Mantisbt Mantisbt 2.1.1
Mantisbt Mantisbt 2.1.2
Mantisbt Mantisbt 2.1.3
Mantisbt Mantisbt 2.3.2
Mantisbt Mantisbt 2.3.0
Mantisbt Mantisbt 2.2.0
Mantisbt Mantisbt 2.2.2
3.5
CVSSv2
CVE-2017-6973
A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote malicious users to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.
Mantisbt Mantisbt 2.0.1
Mantisbt Mantisbt 2.1.0
Mantisbt Mantisbt 2.0.0
Mantisbt Mantisbt 1.3.1
Mantisbt Mantisbt 1.3.8
Mantisbt Mantisbt 1.3.9
Mantisbt Mantisbt 2.1.1
Mantisbt Mantisbt 2.1.2
Mantisbt Mantisbt 1.3.2
Mantisbt Mantisbt 1.3.3
Mantisbt Mantisbt 1.3.0
Mantisbt Mantisbt 2.2.0
Mantisbt Mantisbt 1.3.4
Mantisbt Mantisbt 1.3.5
Mantisbt Mantisbt 2.2.1
Mantisbt Mantisbt 2.1.3
Mantisbt Mantisbt 1.3.6
Mantisbt Mantisbt 1.3.7
3.5
CVSSv2
CVE-2017-7309
A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote malicious users to inject arbitrary code (if CSP settings permit it) through a crafted 'config_option' parameter. This is fixed in 1.3.9, 2.1.3, an...
Mantisbt Mantisbt 2.0.1
Mantisbt Mantisbt 2.1.0
Mantisbt Mantisbt 2.0.0
Mantisbt Mantisbt 1.3.7
Mantisbt Mantisbt 1.3.8
Mantisbt Mantisbt 2.2.1
Mantisbt Mantisbt 2.1.3
Mantisbt Mantisbt 1.3.5
Mantisbt Mantisbt 1.3.6
Mantisbt Mantisbt 2.1.1
Mantisbt Mantisbt 2.1.2
Mantisbt Mantisbt 1.3.1
Mantisbt Mantisbt 1.3.2
Mantisbt Mantisbt 1.3.9
Mantisbt Mantisbt 1.3.0
Mantisbt Mantisbt 2.2.2
Mantisbt Mantisbt 2.2.0
Mantisbt Mantisbt 1.3.3
Mantisbt Mantisbt 1.3.4
3.5
CVSSv2
CVE-2017-7241
A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) allows remote malicious users to inject arbitrary code through a crafted 'type' parameter, if Content Security Protection (CSP) settings all...
Mantisbt Mantisbt 1.2.17
Mantisbt Mantisbt 1.2.18
Mantisbt Mantisbt 1.2.19
Mantisbt Mantisbt 1.2.20
Mantisbt Mantisbt 2.0.1
Mantisbt Mantisbt 2.1.0
Mantisbt Mantisbt 2.0.0
Mantisbt Mantisbt 1.3.7
Mantisbt Mantisbt 1.3.8
Mantisbt Mantisbt 2.2.1
Mantisbt Mantisbt 2.1.3
Mantisbt Mantisbt 1.3.5
Mantisbt Mantisbt 1.3.6
Mantisbt Mantisbt 2.2.2
Mantisbt Mantisbt 2.2.3
Mantisbt Mantisbt 1.3.0
Mantisbt Mantisbt 2.1.1
Mantisbt Mantisbt 2.1.2
Mantisbt Mantisbt 1.3.1
Mantisbt Mantisbt 1.3.2
Mantisbt Mantisbt 1.3.9
Mantisbt Mantisbt 2.3.0
3.5
CVSSv2
CVE-2018-17782
A cross-site scripting (XSS) vulnerability in the Manage Filters page (manage_filter_page.php) in MantisBT 2.1.0 up to and including 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.
Mantisbt Mantisbt
3.5
CVSSv2
CVE-2018-17783
A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 up to and including 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.
Mantisbt Mantisbt
4.3
CVSSv2
CVE-2018-13055
A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 up to and including 2.15.0 allows remote malicious users to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO.
Mantisbt Mantisbt
2.6
CVSSv2
CVE-2018-16514
A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 up to and including 2.17.0 allows remote malicious users to inject arbitrary code (if CSP settings permit it) through a...
Mantisbt Mantisbt
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started