EDB-36068

functional

Mantis Bug Tracker 1.1.8 - Cross-Site Scripting / SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor Net.Edit0rpublished 2011-08-18catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2011-2938USmedium4.3Exploit
Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as dem…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan