It is reported that Mantis is affected by an unspecified SQL injection vulnerability. This is due to the application failing to properly sanitize user-supplied input. Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation. The vendor has not released many details regarding the vulnerability except to state that Mantis 0.18.3 addresses this issue.
It is reported that Mantis is affected by an unspecified SQL injection vulnerability. This is due to the application failing to properly sanitize user-supplied input. Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation. The vendor has not released many details regarding the vulnerability except to state that Mantis 0.18.3 addresses this issue.