CVE-2002-1110
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.
Affected Platforms (CPE)
📦
Mantis
Mantis
= 0.15.3📦
Mantis
Mantis
= 0.15.4📦
Mantis
Mantis
= 0.15.5📦
Mantis
Mantis
= 0.15.6📦
Mantis
Mantis
= 0.15.7📦
Mantis
Mantis
= 0.15.8📦
Mantis
Mantis
= 0.15.9📦
Mantis
Mantis
= 0.15.10📦
Mantis
Mantis
= 0.15.11📦
Mantis
Mantis
= 0.15.12📦
Mantis
Mantis
= 0.16.0📦
Mantis
Mantis
= 0.16.1📦
Mantis
Mantis
= 0.17.0📦
Mantis
Mantis
= 0.17.1📦
Mantis