6.5

CVSSv2

Published: 09/10/2019 Updated: 20/01/2023

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Subscribe to Mantisbt

MantisBT prior to 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mantisbt mantisbt

Mantis Bug Tracker version 230 suffers from a remote code execution vulnerability ...

CWE-78 https://mantisbt.org/bugs/changelog_page.php?project=mantisbt https://mantisbt.org/bugs/view.php?id=26162 https://github.com/mantisbt/mantisbt/commit/7092573fac31eff41823f13540324db167c8bd52 https://github.com/mantisbt/mantisbt/commit/cebfb9acb3686e8904d80bd4bc80720b54ba08e5 https://github.com/mantisbt/mantisbt/commit/fc7668c8e45db55fc3a4b991ea99d2b80861a14c https://mantisbt.org/bugs/view.php?id=26091 https://github.com/mantisbt/mantisbt/commit/5fb979604d88c630343b3eaf2b435cd41918c501 http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html https://nvd.nist.gov https://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook