CVE-2014-9280
The current_user_get_bug_filter function in core/current_user_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary PHP code via the filter parameter.
| Software | From | Fixed in |
|---|---|---|
| mantisbt / mantisbt | - | 1.2.17.x |
- http://seclists.org/oss-sec/2014/q4/864
- http://seclists.org/oss-sec/2014/q4/923
- http://secunia.com/advisories/62101
- http://www.debian.org/security/2015/dsa-3120
- http://www.mantisbt.org/bugs/view.php?id=17875
- http://www.securityfocus.com/bid/71361
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99016
- https://github.com/mantisbt/mantisbt/commit/599364b2
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime