MantisBT 1.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:mantisbt:mantisbt:1.2.1:*:*:*:*:*:*:*
part: a version: 1.2.1 update: *
| Vendor | Mantisbt (9be8c23a-b549-5ad5-a5b6-9beba90daced) |
|---|---|
| Product | Mantisbt (9ac8dfd9-fe15-55d7-90e0-68973c4eb995) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mantisbt/mantisbt |
purl2cpe | 2026-06-01 10:12:58.632405 |
pkg:rpm/opensuse/mantisbt |
purl2cpe | 2026-06-01 10:12:58.632407 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-1042 |
vulnerable | 2026-06-08 05:06:24.869192 |
Details available
The string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular expression, which allows remote attackers to conduct open redirect and phishing attacks via a URL with a ":/" (colon slash) separator in the return parameter to login_page.php, a different vulnerability than CVE-2014-6316.
Published: 2015-02-10T20:00:00.000Z
Updated: 2024-08-06T04:33:20.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9279 |
vulnerable | 2026-06-08 05:06:11.312561 |
Details available
The print_test_result function in admin/upgrade_unattended.php in MantisBT 1.1.0a3 through 1.2.x before 1.2.18 allows remote attackers to obtain database credentials via a URL in the hostname parameter and reading the parameters in the response sent to the URL.
Published: 2014-12-08T16:00:00.000Z
Updated: 2024-08-06T13:40:25.094Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9272 |
vulnerable | 2026-06-08 05:06:11.258382 |
Details available
The string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly validate the URL protocol, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the javascript:// protocol.
Published: 2015-01-09T18:00:00.000Z
Updated: 2024-08-06T13:40:24.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9271 |
vulnerable | 2026-06-08 05:06:11.257125 |
Details available
Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename.
Published: 2015-01-09T18:00:00.000Z
Updated: 2024-08-06T13:40:25.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9270 |
vulnerable | 2026-06-08 05:06:11.255995 |
Details available
Cross-site scripting (XSS) vulnerability in the projax_array_serialize_for_autocomplete function in core/projax_api.php in MantisBT 1.1.0a3 through 1.2.17 allows remote attackers to inject arbitrary web script or HTML via the "profile/Platform" field.
Published: 2014-12-08T16:00:00.000Z
Updated: 2024-08-06T13:40:24.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9269 |
vulnerable | 2026-06-08 05:06:11.254352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8554 |
vulnerable | 2026-06-08 05:06:09.314306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6387 |
vulnerable | 2026-06-08 05:05:57.604745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1609 |
vulnerable | 2026-06-08 05:05:25.696690 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1608 |
vulnerable | 2026-06-08 05:05:25.689193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4460 |
vulnerable | 2026-06-08 05:04:46.933674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5523 |
vulnerable | 2026-06-08 05:02:57.034162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5522 |
vulnerable | 2026-06-08 05:02:57.027742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2692 |
vulnerable | 2026-06-08 05:02:05.556123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2691 |
vulnerable | 2026-06-08 05:02:05.547517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1123 |
vulnerable | 2026-06-08 05:00:47.591504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1122 |
vulnerable | 2026-06-08 05:00:47.589831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1121 |
vulnerable | 2026-06-08 05:00:47.588464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1120 |
vulnerable | 2026-06-08 05:00:47.586791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1119 |
vulnerable | 2026-06-08 05:00:47.585118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1118 |
vulnerable | 2026-06-08 05:00:47.564301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3578 |
vulnerable | 2026-06-08 04:59:26.420353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3358 |
vulnerable | 2026-06-08 04:59:24.860334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3357 |
vulnerable | 2026-06-08 04:59:24.859239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3356 |
vulnerable | 2026-06-08 04:59:24.853766 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2938 |
vulnerable | 2026-06-08 04:58:09.714935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4350 |
vulnerable | 2026-06-08 04:56:27.285079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4349 |
vulnerable | 2026-06-08 04:56:27.283183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4348 |
vulnerable | 2026-06-08 04:56:27.279675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3763 |
vulnerable | 2026-06-08 04:55:16.685544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3303 |
vulnerable | 2026-06-08 04:55:14.076542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.