Multiple SQL injection vulnerabilities in Mantis 0.17.2 and previous versions, when running without magic_quotes_gpc enabled, allows remote malicious users to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mantis mantis 0.15.10 |
||
mantis mantis 0.15.7 |
||
mantis mantis 0.15.8 |
||
mantis mantis 0.15.5 |
||
mantis mantis 0.15.6 |
||
mantis mantis 0.17.1 |
||
mantis mantis 0.17.2 |
||
mantis mantis 0.15.3 |
||
mantis mantis 0.15.4 |
||
mantis mantis 0.16.1 |
||
mantis mantis 0.17.0 |
||
mantis mantis 0.15.11 |
||
mantis mantis 0.15.12 |
||
mantis mantis 0.15.9 |
||
mantis mantis 0.16.0 |
Vulmon