Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mantis vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-4688
core/string_api.php in Mantis prior to 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote malicious users to discover an issue's title and status via a request with a modified issue number.
Mantis Mantis 1.0.7
Mantis Mantis 1.0.6
Mantis Mantis 0.19.3
Mantis Mantis 1.0.8
Mantis Mantis 1.0.1
Mantis Mantis 0.19.4
Mantis Mantis 1.0.3
Mantis Mantis 1.0.2
Mantis Mantis 1.1.2
Mantis Mantis 1.0.5
Mantis Mantis 1.0.4
Mantis Mantis 1.1.1
Mantis Mantis
NA
CVE-2008-4689
Mantis prior to 1.1.3 does not unset the session cookie during logout, which makes it easier for remote malicious users to hijack sessions.
Mantis Mantis 1.0.5
Mantis Mantis 1.0.4
Mantis Mantis
Mantis Mantis 1.0.7
Mantis Mantis 1.0.6
Mantis Mantis 0.19.3
Mantis Mantis 1.0.8
Mantis Mantis 1.1.1
Mantis Mantis 1.0.1
Mantis Mantis 0.19.4
Mantis Mantis 1.0.3
Mantis Mantis 1.0.2
NA
CVE-2008-3102
Mantis 1.1.x up to and including 1.1.2 and 1.2.x up to and including 1.2.0a2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote malicious users to capture this cookie.
Mantisbt Mantisbt 1.2.0a1
Mantisbt Mantisbt 1.2.0a2
Mantisbt Mantisbt 1.1.0
Mantisbt Mantisbt 1.1.1
Mantisbt Mantisbt 1.1.2
NA
CVE-2008-3333
Directory traversal vulnerability in core/lang_api.php in Mantis prior to 1.1.2 allows remote malicious users to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).
Mantis Mantis 0.10
Mantis Mantis 0.10.0
Mantis Mantis 0.12.0
Mantis Mantis 0.13
Mantis Mantis 0.14.4
Mantis Mantis 0.14.5
Mantis Mantis 0.15.10
Mantis Mantis 0.15.11
Mantis Mantis 0.15.7
Mantis Mantis 0.15.8
Mantis Mantis 0.17.2
Mantis Mantis 0.17.3
Mantis Mantis 0.18.0a1
Mantis Mantis 0.18.0a2
Mantis Mantis 0.19
Mantis Mantis 0.19.0
Mantis Mantis 0.19.4
Mantis Mantis 0.9
Mantis Mantis 1.0.0 Rc3
Mantis Mantis 1.0.0 Rc4
Mantis Mantis 1.0.0rc3
Mantis Mantis 1.0.0rc4
NA
CVE-2008-3332
Eval injection vulnerability in adm_config_set.php in Mantis prior to 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
Mantis Mantis 0.11
Mantis Mantis 0.11.0
Mantis Mantis 0.14
Mantis Mantis 0.10
Mantis Mantis 0.10.0
Mantis Mantis 0.12.0
Mantis Mantis 0.13
Mantis Mantis 0.14.4
Mantis Mantis 0.14.5
Mantis Mantis 0.15.10
Mantis Mantis 0.15.11
Mantis Mantis 0.15.7
Mantis Mantis 0.15.8
Mantis Mantis 0.17.2
Mantis Mantis 0.17.3
Mantis Mantis 0.18.0a1
Mantis Mantis 0.18.0a2
Mantis Mantis 0.19
Mantis Mantis 0.19.0
Mantis Mantis 0.19.0 Rc1
Mantis Mantis 0.19.4
Mantis Mantis 0.9
1 EDB exploit
NA
CVE-2008-3331
Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis prior to 1.1.2 allows remote malicious users to inject arbitrary web script or HTML via the filter_target parameter.
Mantis Mantis 0.10.0
Mantis Mantis 0.10.1
Mantis Mantis 0.13.0
Mantis Mantis 0.13.1
Mantis Mantis 0.14.5
Mantis Mantis 0.14.6
Mantis Mantis 0.15.11
Mantis Mantis 0.15.12
Mantis Mantis 0.15.9
Mantis Mantis 0.11.0
Mantis Mantis 0.11.1
Mantis Mantis 0.14.1
Mantis Mantis 0.14.2
Mantis Mantis 0.15
Mantis Mantis 0.15.0
Mantis Mantis 0.15.4
Mantis Mantis 0.15.5
Mantis Mantis 0.15.6
Mantis Mantis 0.17
Mantis Mantis 0.17.0
Mantis Mantis 0.18
Mantis Mantis 0.18.0
1 EDB exploit
NA
CVE-2008-2276
Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote malicious users to create new administrative users via a crafted link.
Matisbt Mantis 1.1.1
1 EDB exploit
NA
CVE-2008-1733
SQL injection vulnerability in puarcade.class.php 2.2 and previous versions in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote malicious users to execute arbitrary SQL commands via the gid parameter to index.php.
Pragmaticutopia Com Puarcade
1 EDB exploit
NA
CVE-2008-0404
Cross-site scripting (XSS) vulnerability in Mantis prior to 1.1.1 allows remote malicious users to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary.
Mantis Mantis 0.10
Mantis Mantis 0.10.1
Mantis Mantis 0.14
Mantis Mantis 0.14.1
Mantis Mantis 0.14.2
Mantis Mantis 0.15
Mantis Mantis 0.15.1
Mantis Mantis 0.15.5
Mantis Mantis 0.15.6
Mantis Mantis 0.17.0
Mantis Mantis 0.17.1
Mantis Mantis 0.18.0
Mantis Mantis 0.18.0 Rc1
Mantis Mantis 0.19.0
Mantis Mantis 0.19.0 Rc1
Mantis Mantis 0.9
Mantis Mantis 0.9.1
Mantis Mantis 1.0.0a2
Mantis Mantis 1.0.0a3
Mantis Mantis 0.11.1
Mantis Mantis 0.12
Mantis Mantis 0.10.2
NA
CVE-2007-6611
Cross-site scripting (XSS) vulnerability in view.php in Mantis prior to 1.1.0 allows remote malicious users to inject arbitrary web script or HTML via a filename, related to bug_report.php.
Mantis Mantis
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »