MantisBT 1.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:mantisbt:mantisbt:1.0.0:*:*:*:*:*:*:*
part: a version: 1.0.0 update: *
| Vendor | Mantisbt (9be8c23a-b549-5ad5-a5b6-9beba90daced) |
|---|---|
| Product | Mantisbt (9ac8dfd9-fe15-55d7-90e0-68973c4eb995) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mantisbt/mantisbt |
purl2cpe | 2026-06-01 10:12:58.609391 |
pkg:rpm/opensuse/mantisbt |
purl2cpe | 2026-06-01 10:12:58.609392 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-8554 |
vulnerable | 2026-06-08 05:06:09.284938 |
Details available
SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL commands via the project_id parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1609.
Published: 2014-11-13T15:00:00.000Z
Updated: 2024-08-06T13:18:48.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4460 |
vulnerable | 2026-06-08 05:04:46.912156 |
Details available
Cross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via a project name.
Published: 2014-01-10T15:00:00.000Z
Updated: 2024-08-06T16:45:14.513Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5523 |
vulnerable | 2026-06-08 05:02:57.033482 |
Details available
core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing permission to view that bug.
Published: 2012-11-16T00:00:00.000Z
Updated: 2024-08-06T21:05:47.354Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5522 |
vulnerable | 2026-06-08 05:02:57.006778 |
Details available
MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a blank value for a per-status setting.
Published: 2012-11-16T00:00:00.000Z
Updated: 2024-08-06T21:05:47.313Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2692 |
vulnerable | 2026-06-08 05:02:05.552651 |
Details available
MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments.
Published: 2012-06-17T01:00:00.000Z
Updated: 2024-08-06T19:42:32.456Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2691 |
vulnerable | 2026-06-08 05:02:05.527257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1123 |
vulnerable | 2026-06-08 05:00:47.590792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1122 |
vulnerable | 2026-06-08 05:00:47.589328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1121 |
vulnerable | 2026-06-08 05:00:47.587808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1120 |
vulnerable | 2026-06-08 05:00:47.586131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1119 |
vulnerable | 2026-06-08 05:00:47.571220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1118 |
vulnerable | 2026-06-08 05:00:47.548184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3578 |
vulnerable | 2026-06-08 04:59:26.420036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3358 |
vulnerable | 2026-06-08 04:59:24.860039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3357 |
vulnerable | 2026-06-08 04:59:24.858828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3356 |
vulnerable | 2026-06-08 04:59:24.842667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2938 |
vulnerable | 2026-06-08 04:58:09.705780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4350 |
vulnerable | 2026-06-08 04:56:27.284329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4349 |
vulnerable | 2026-06-08 04:56:27.282295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4348 |
vulnerable | 2026-06-08 04:56:27.261583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3763 |
vulnerable | 2026-06-08 04:55:16.685103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3303 |
vulnerable | 2026-06-08 04:55:14.070750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2802 |
vulnerable | 2026-06-08 04:55:10.776331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.