https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-4689.htmlhttps://patchthecve.com/cve/CVE-2008-4689.htmlTue, 16 Jun 2026 22:58:19 +0000HIGH 7.5: Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.https://patchthecve.com/cve/CVE-2008-4688.htmlhttps://patchthecve.com/cve/CVE-2008-4688.htmlTue, 16 Jun 2026 22:58:19 +0000MEDIUM 5.0: core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number.https://patchthecve.com/cve/CVE-2008-4687.htmlhttps://patchthecve.com/cve/CVE-2008-4687.htmlTue, 16 Jun 2026 22:58:19 +0000HIGH 9.0: manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.https://patchthecve.com/cve/CVE-2008-3333.htmlhttps://patchthecve.com/cve/CVE-2008-3333.htmlTue, 16 Jun 2026 22:55:37 +0000HIGH 7.5: Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).https://patchthecve.com/cve/CVE-2008-3332.htmlhttps://patchthecve.com/cve/CVE-2008-3332.htmlTue, 16 Jun 2026 22:55:37 +0000MEDIUM 6.5: Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.https://patchthecve.com/cve/CVE-2008-3331.htmlhttps://patchthecve.com/cve/CVE-2008-3331.htmlTue, 16 Jun 2026 22:55:37 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter.https://patchthecve.com/cve/CVE-2008-0404.htmlhttps://patchthecve.com/cve/CVE-2008-0404.htmlTue, 16 Jun 2026 22:49:32 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary.https://patchthecve.com/cve/CVE-2007-6611.htmlhttps://patchthecve.com/cve/CVE-2007-6611.htmlTue, 16 Jun 2026 22:48:26 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php.https://patchthecve.com/cve/CVE-2006-6574.htmlhttps://patchthecve.com/cve/CVE-2006-6574.htmlTue, 16 Jun 2026 22:33:23 +0000MEDIUM 5.0: Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field.https://patchthecve.com/cve/CVE-2006-6515.htmlhttps://patchthecve.com/cve/CVE-2006-6515.htmlTue, 16 Jun 2026 22:33:17 +0000HIGH 10.0: Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders.https://patchthecve.com/cve/CVE-2006-1577.htmlhttps://patchthecve.com/cve/CVE-2006-1577.htmlTue, 16 Jun 2026 22:23:14 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters.https://patchthecve.com/cve/CVE-2006-0841.htmlhttps://patchthecve.com/cve/CVE-2006-0841.htmlTue, 16 Jun 2026 22:21:23 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide_status, (2) handler_id, (3) user_monitor, (4) reporter_id, (5) view_type, (6) show_severity, (7) show_category, (8) show_status, (9) show_rhttps://patchthecve.com/cve/CVE-2006-0840.htmlhttps://patchthecve.com/cve/CVE-2006-0840.htmlTue, 16 Jun 2026 22:21:23 +0000MEDIUM 5.0: manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE:https://patchthecve.com/cve/CVE-2006-0665.htmlhttps://patchthecve.com/cve/CVE-2006-0665.htmlTue, 16 Jun 2026 22:21:02 +0000HIGH 10.0: Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenchttps://patchthecve.com/cve/CVE-2006-0664.htmlhttps://patchthecve.com/cve/CVE-2006-0664.htmlTue, 16 Jun 2026 22:21:02 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An https://patchthecve.com/cve/CVE-2006-0147.htmlhttps://patchthecve.com/cve/CVE-2006-0147.htmlTue, 16 Jun 2026 22:19:59 +0000HIGH 7.5: Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbhttps://patchthecve.com/cve/CVE-2006-0146.htmlhttps://patchthecve.com/cve/CVE-2006-0146.htmlTue, 16 Jun 2026 22:19:59 +0000HIGH 7.5: The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL https://patchthecve.com/cve/CVE-2005-4523.htmlhttps://patchthecve.com/cve/CVE-2005-4523.htmlTue, 16 Jun 2026 22:18:57 +0000MEDIUM 5.0: Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information.https://patchthecve.com/cve/CVE-2005-4522.htmlhttps://patchthecve.com/cve/CVE-2005-4522.htmlTue, 16 Jun 2026 22:18:57 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) view_type and (2) target_field parameters.https://patchthecve.com/cve/CVE-2005-4520.htmlhttps://patchthecve.com/cve/CVE-2005-4520.htmlTue, 16 Jun 2026 22:18:57 +0000MEDIUM 5.0: Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which is the source of this description, it is unclear whether this is a duplicate of another CVE.https://patchthecve.com/cve/CVE-2005-4519.htmlhttps://patchthecve.com/cve/CVE-2005-4519.htmlTue, 16 Jun 2026 22:18:56 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2) sort parameters to the manage user page (manage_user_page.php), or (3) the sort parameter to view_ahttps://patchthecve.com/cve/CVE-2005-4238.htmlhttps://patchthecve.com/cve/CVE-2005-4238.htmlTue, 16 Jun 2026 22:18:26 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.https://patchthecve.com/cve/CVE-2005-3339.htmlhttps://patchthecve.com/cve/CVE-2005-3339.htmlTue, 16 Jun 2026 22:16:45 +0000HIGH 7.2: Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.https://patchthecve.com/cve/CVE-2005-3338.htmlhttps://patchthecve.com/cve/CVE-2005-3338.htmlTue, 16 Jun 2026 22:16:45 +0000MEDIUM 5.0: Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.https://patchthecve.com/cve/CVE-2005-3337.htmlhttps://patchthecve.com/cve/CVE-2005-3337.htmlTue, 16 Jun 2026 22:16:45 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php.https://patchthecve.com/cve/CVE-2005-3336.htmlhttps://patchthecve.com/cve/CVE-2005-3336.htmlTue, 16 Jun 2026 22:16:45 +0000HIGH 7.5: SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.https://patchthecve.com/cve/CVE-2005-3335.htmlhttps://patchthecve.com/cve/CVE-2005-3335.htmlTue, 16 Jun 2026 22:16:45 +0000HIGH 7.5: PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.https://patchthecve.com/cve/CVE-2005-3091.htmlhttps://patchthecve.com/cve/CVE-2005-3091.htmlTue, 16 Jun 2026 22:16:14 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".https://patchthecve.com/cve/CVE-2005-3090.htmlhttps://patchthecve.com/cve/CVE-2005-3090.htmlTue, 16 Jun 2026 22:16:14 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used to delete the bug, as identified by bug#0006002, ahttps://patchthecve.com/cve/CVE-2005-2557.htmlhttps://patchthecve.com/cve/CVE-2005-2557.htmlTue, 16 Jun 2026 22:15:12 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090.https://patchthecve.com/cve/CVE-2005-2556.htmlhttps://patchthecve.com/cve/CVE-2005-2556.htmlTue, 16 Jun 2026 22:15:11 +0000HIGH 7.5: core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956.https://patchthecve.com/cve/CVE-2004-2666.htmlhttps://patchthecve.com/cve/CVE-2004-2666.htmlTue, 16 Jun 2026 22:10:05 +0000MEDIUM 5.0: Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.https://patchthecve.com/cve/CVE-2004-1734.htmlhttps://patchthecve.com/cve/CVE-2004-1734.htmlTue, 16 Jun 2026 22:08:17 +0000HIGH 7.5: PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t_core_path parameter to bug_api.php or (2) t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code.https://patchthecve.com/cve/CVE-2004-1730.htmlhttps://patchthecve.com/cve/CVE-2004-1730.htmlTue, 16 Jun 2026 22:08:17 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_sehttps://patchthecve.com/cve/CVE-2004-1731.htmlhttps://patchthecve.com/cve/CVE-2004-1731.htmlTue, 16 Jun 2026 22:08:17 +0000MEDIUM 5.0: signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.https://patchthecve.com/cve/CVE-2003-0499.htmlhttps://patchthecve.com/cve/CVE-2003-0499.htmlTue, 16 Jun 2026 22:02:19 +0000LOW 3.6: Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.https://patchthecve.com/cve/CVE-2002-1116.htmlhttps://patchthecve.com/cve/CVE-2002-1116.htmlTue, 16 Jun 2026 21:58:45 +0000HIGH 7.5: The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.https://patchthecve.com/cve/CVE-2002-1115.htmlhttps://patchthecve.com/cve/CVE-2002-1115.htmlTue, 16 Jun 2026 21:58:45 +0000MEDIUM 5.0: Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) view_bug_advanced_page.php, or (4) view_bug_page.php.https://patchthecve.com/cve/CVE-2002-1114.htmlhttps://patchthecve.com/cve/CVE-2002-1114.htmlTue, 16 Jun 2026 21:58:45 +0000HIGH 7.5: config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_page, (3) g_css_include_file, (4) g_meta_include_file, or (5) a cookie.https://patchthecve.com/cve/CVE-2002-1113.htmlhttps://patchthecve.com/cve/CVE-2002-1113.htmlTue, 16 Jun 2026 21:58:45 +0000HIGH 7.5: summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code.https://patchthecve.com/cve/CVE-2002-1112.htmlhttps://patchthecve.com/cve/CVE-2002-1112.htmlTue, 16 Jun 2026 21:58:44 +0000MEDIUM 5.0: Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.https://patchthecve.com/cve/CVE-2002-1111.htmlhttps://patchthecve.com/cve/CVE-2002-1111.htmlTue, 16 Jun 2026 21:58:44 +0000MEDIUM 5.0: print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.https://patchthecve.com/cve/CVE-2002-1110.htmlhttps://patchthecve.com/cve/CVE-2002-1110.htmlTue, 16 Jun 2026 21:58:44 +0000HIGH 10.0: Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.