|
Mantis Configuration Remote File Include Command Execution Vulnerability
Mantis depends on some include files for configuration of the bug tracking system. However, since Mantis does not properly validate the path to the include file, it is possible for attackers to specify an arbitrary path, either to a local file or a file on a remote server. Attackers may use this to include PHP files located on remote servers. Execution of arbitrary commands with the privileges of the webserver is the result of successful exploitation. |
|
 Privacy Statement |
