EDB-42043

PoC

Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2017-05-20catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-7620US	medium6.5	1.36% (71st)	Exploit	2017-05-21
MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \/ substri…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.