CVE-2008-2276 Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link.
MediumCVSS 6.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to create new administrative users via a crafted link.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| matisbt mantis | = 1.1.1 | No fix listed |
References
- 20080520 Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities mailing-list
- 30270 third-party-advisory vendor-advisory
- 31171 third-party-advisory
- 31972 third-party-advisory
- sourceforge.net
- GLSA-200809-10 vendor-advisory
- 29297 vdb-entry
- ADV-2008-1598 vdb-entry
- mantis-usercreate-csrf(42447) vdb-entry
- 5657 exploit
- FEDORA-2008-6647 vendor-advisory
- FEDORA-2008-6657 vendor-advisory