Back to search
CVE-2008-3333
Published: Jul 27, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
30354
vdb-entry
x_refsource_BID
http://www.mantisbt.org/bugs/view.php?id=9154
x_refsource_CONFIRM
mantis-accountprefsupdate-file-include(43984)
vdb-entry
x_refsource_XF
http://www.mantisbt.org/bugs/changelog_page.php
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=456044
x_refsource_CONFIRM
30270
third-party-advisory
x_refsource_SECUNIA
GLSA-200809-10
vendor-advisory
x_refsource_GENTOO
31972
third-party-advisory
x_refsource_SECUNIA
29297
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now