EDB-48818
PoCMantis Bug Tracker 2.3.0 - Remote Code Execution (Unauthenticated)
view exploit source exploit_dbtype webappsauthor Nikolas Geiselmanpublished 2020-09-18catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-15715US | high7.2 | Exploit | ||
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution. | ||||
| CVE-2017-7615US | high8.8 | Exploit | ||
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan