← Database

CVE-2002-1112

MEDIUM CVSS: 5.0 Published: 2002-10-04 Modified: 2026-06-16

Description

Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.

Affected Platforms

Mantis Mantis

Weakness Type

NVD-CWE-Other

References