Unscored DSA-153 5 CVEs

mantis - cross site code execution and privilege escalation

Published Aug 14, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	mantis	0.17.1-2.2

Vulnerabilities 5

Unscored —

CVE-2002-1110

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, all…

Sep 10, 2002
Unscored —

CVE-2002-1111

print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote att…

Sep 1, 2004
Unscored —

CVE-2002-1112

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that i…

Sep 1, 2004
Unscored —

CVE-2002-1113 Public exploit

summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modif…

Sep 1, 2004
Unscored —

CVE-2002-1114

config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via t…

Sep 10, 2002