CVE-2002-1114

config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_page, (3) g_css_include_file, (4) g_meta_include_file, or (5) a cookie.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*
cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*
cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*
cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-10-04 04:00

Updated : 2023-12-10 10:17


NVD link : CVE-2002-1114

Mitre link : CVE-2002-1114

CVE.ORG link : CVE-2002-1114


JSON object : View

Products Affected

mantis

  • mantis