CVE-2002-1115

Mô tả

Tham khảo

• mantisbt.sourceforge.net/advisories/2002/2002-06.txt
• marc.info
• debian.org/security/2002/dsa-161 · Patch
• iss.net/security_center/static/9954.php
• securityfocus.com/bid/5563

Lỗ hổng khác của mantis

• CVE-2008-4689CAO 7.5Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.
• CVE-2008-4688TRUNG BÌNH 5.0core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source…
• CVE-2008-4687NGHIÊM TRỌNG 9.0manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP …
• CVE-2008-3333CAO 7.5Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files…
• CVE-2008-3332TRUNG BÌNH 6.5Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary co…