CVE-2008-4687
Published Oct 22, 2008
Last updated 7 years ago
Overview
- Description
- manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9
- Impact score
- 10
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-94
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mantis:mantis:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "132BAF7E-8047-417F-8C78-1C1FBDAF97A0",
"versionEndIncluding": "1.1.3"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:0.19.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D8E7458-6655-4C86-85A9-81004FF38321"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:0.19.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE92E018-C25C-468D-9EF5-5665F0B42EA2"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA5AE0B4-15AB-49E7-9B97-96BA322B0966"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48069606-59B6-4D20-B909-997CA7EDBD2B"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E42CD1CB-49E7-484B-9629-78A24B754346"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F95B327F-94A8-4D4F-A330-1B9BF4B764FD"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "215420D5-4690-45BE-AE84-CF1522523299"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5621726F-CA50-4336-9BCE-55F39BE5CDCF"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B0ECF83-F61A-4745-AA0D-4822A38F24DA"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91621575-AF90-4C01-AA87-A99C304227D6"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAEE63A1-106C-4E50-8B6F-D134C69FD194"
},
{
"criteria": "cpe:2.3:a:mantis:mantis:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7729C7E-ECC1-48D0-BFF7-82A8D96DC0AF"
}
],
"operator": "OR"
}
]
}
]