Lucene search
Dsquare SecurityE-12HistoryFeb 01, 2012 - 12:00 a.m.
Mantis <= 1.1.1 LFI
2012-02-0100:00:00
Dsquare Security
42
0.01 Low
EPSS
Percentile
83.4%
LFI Vulnerability in language parameter.
This exploit is dangerous. Because the LFI is done with require()
on a value saved in SQL, if the path is non-existent, the user
account will be broken. Additionally, this value must be <= 32chars
(MySQL vachar(32))
Vulnerability Type: Local File Include
For the exploit source code contact DSquare Security sales team.Related
ubuntucve
ubuntucve
CVE-2008-3333
2008-07-27 00:00:00
nvd
nvd
CVE-2008-3333
2008-07-27 23:41:00
cve
cve
CVE-2008-3333
2008-07-27 23:41:00
prion
prion
Directory traversal
2008-07-27 23:41:00
cvelist
cvelist
CVE-2008-3333
2008-07-27 23:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200809-10 (mantisbt)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200809-10 (mantisbt)
2008-09-24 00:00:00
FreeBSD Ports: mantis
2008-12-10 00:00:00
freebsd
freebsd
mantis -- multiple vulnerabilities
2008-05-15 00:00:00
nessus
nessus
FreeBSD : mantis -- multiple vulnerabilities (29255141-c3df-11dd-a721-0030843d3802)
2008-12-08 00:00:00
GLSA-200809-10 : Mantis: Multiple vulnerabilities
2008-09-22 00:00:00
gentoo
gentoo
Mantis: Multiple vulnerabilities
2008-09-21 00:00:00
securityvulns
securityvulns