CVE-2008-3332

mantis: code execution by users with administrative privileges

Published Jul 27, 2008 CVSS 2.0 · 6.5 Medium EPSS 9.5% KEV · Not listed
Description
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-3319 Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:37 AM
Reserved
Jul 27, 2008, 12:00 AM
Status
Modified
Published
Jul 27, 2008, 11:41 PM
Modified
Jun 16, 2026, 10:55 PM
Severity
Moderate
Public date
May 20, 2008, 12:00 AM