summary_graph_functions.php in Mantis 0.17.3 and previous versions allows remote malicious users to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mantis mantis 0.15.10 |
||
mantis mantis 0.15.7 |
||
mantis mantis 0.15.8 |
||
mantis mantis 0.15.5 |
||
mantis mantis 0.15.6 |
||
mantis mantis 0.17.2 |
||
mantis mantis 0.17.3 |
||
mantis mantis 0.15.3 |
||
mantis mantis 0.15.4 |
||
mantis mantis 0.17.0 |
||
mantis mantis 0.17.1 |
||
mantis mantis 0.15.11 |
||
mantis mantis 0.15.12 |
||
mantis mantis 0.15.9 |
||
mantis mantis 0.16.0 |
||
mantis mantis 0.16.1 |
Vulmon