Search for packages
| purl | pkg:composer/mantisbt/mantisbt@2.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-98xr-mmq5-vc5h
Aliases: CVE-2017-12061 |
MantisBT XSS allows unsanitized input via admin/install.php An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x … |
Vulnerable |
|
GHSA-v23g-wjvq-2fpf
Aliases: CVE-2019-15715 |
MantisBT Remote Code Execution MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution. |
Vulnerable |
|
GHSA-9x76-mp7r-2xc5
Aliases: CVE-2017-7620 |
MantisBT vulnerable to CSRF and Open Redirect attacks MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a … |
Vulnerable Vulnerable |
|
GHSA-w93w-rx52-24qh
Aliases: CVE-2017-12062 |
MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php An XSS issue was discovered in manage_user_page.php in MantisBT 2.x … |
Vulnerable Vulnerable |
|
GHSA-v7qf-22rw-chph
Aliases: CVE-2017-6973 |
MantisBT XSS via adm_config_report.php's action parameter A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote … | There are no reported fixed by versions. |
|
GHSA-252r-f55f-ff34
Aliases: CVE-2017-7615 |
MantisBT allows arbitrary password reset MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash … | There are no reported fixed by versions. |
|
GHSA-x53v-v9xp-gf6g
Aliases: CVE-2017-7241 |
MantisBT XSS via move_attachments_page.php A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) … | There are no reported fixed by versions. |
|
CVE-2017-12061
Aliases: GHSA-98xr-mmq5-vc5h |
MantisBT XSS allows unsanitized input via admin/install.php An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x … |
Vulnerable Vulnerable |
|
GHSA-74gh-5j33-vg4w
Aliases: CVE-2018-14504 |
MantisBT allows XSS on the Edit Filter page via crafted filter name An issue was discovered in manage_filter_edit_page.php in MantisBT … |
Vulnerable |