Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2002-1110

Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.2%
CVSS Severity
CVSS v2 Score 10.0
Products affected by CVE-2002-1110
  • Mantis » Mantis » Version: 0.15.10
    cpe:2.3:a:mantis:mantis:0.15.10
  • Mantis » Mantis » Version: 0.15.11
    cpe:2.3:a:mantis:mantis:0.15.11
  • Mantis » Mantis » Version: 0.15.12
    cpe:2.3:a:mantis:mantis:0.15.12
  • Mantis » Mantis » Version: 0.15.3
    cpe:2.3:a:mantis:mantis:0.15.3
  • Mantis » Mantis » Version: 0.15.4
    cpe:2.3:a:mantis:mantis:0.15.4
  • Mantis » Mantis » Version: 0.15.5
    cpe:2.3:a:mantis:mantis:0.15.5
  • Mantis » Mantis » Version: 0.15.6
    cpe:2.3:a:mantis:mantis:0.15.6
  • Mantis » Mantis » Version: 0.15.7
    cpe:2.3:a:mantis:mantis:0.15.7
  • Mantis » Mantis » Version: 0.15.8
    cpe:2.3:a:mantis:mantis:0.15.8
  • Mantis » Mantis » Version: 0.15.9
    cpe:2.3:a:mantis:mantis:0.15.9
  • Mantis » Mantis » Version: 0.16.0
    cpe:2.3:a:mantis:mantis:0.16.0
  • Mantis » Mantis » Version: 0.16.1
    cpe:2.3:a:mantis:mantis:0.16.1
  • Mantis » Mantis » Version: 0.17.0
    cpe:2.3:a:mantis:mantis:0.17.0
  • Mantis » Mantis » Version: 0.17.1
    cpe:2.3:a:mantis:mantis:0.17.1
  • Mantis » Mantis » Version: 0.17.2
    cpe:2.3:a:mantis:mantis:0.17.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved