CVE-2008-3332
published 2008-07-27CVE-2008-3332: Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value…
PriorityP347medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
9.45%
94.8th percentile
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
Affected
95 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mantis | mantis | <= 1.1.1 | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
| mantis | mantis | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat6.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
mantis: code execution by users with administrative privileges
vendor_redhat·2008-05-20·CVSS 6.5
CVE-2008-3332 [MEDIUM] mantis: code execution by users with administrative privileges
mantis: code execution by users with administrative privileges
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
GHSA
GHSA-32m2-5wjp-2hcg: Eval injection vulnerability in adm_config_set
ghsa_unreviewed·2022-05-01
CVE-2008-3332 [MEDIUM] CWE-94 GHSA-32m2-5wjp-2hcg: Eval injection vulnerability in adm_config_set
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
No detection rules found.
http://marc.info/?l=bugtraq&m=121130774617956&w=4http://secunia.com/advisories/30270http://secunia.com/advisories/31972http://securityreason.com/securityalert/4044http://www.gentoo.org/security/en/glsa/glsa-200809-10.xmlhttp://www.mantisbt.org/bugs/changelog_page.phphttp://www.securityfocus.com/bid/29297http://www.vupen.com/english/advisories/2008/1598/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42550https://www.exploit-db.com/exploits/5657http://marc.info/?l=bugtraq&m=121130774617956&w=4http://secunia.com/advisories/30270http://secunia.com/advisories/31972http://securityreason.com/securityalert/4044http://www.gentoo.org/security/en/glsa/glsa-200809-10.xmlhttp://www.mantisbt.org/bugs/changelog_page.phphttp://www.securityfocus.com/bid/29297http://www.vupen.com/english/advisories/2008/1598/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42550https://www.exploit-db.com/exploits/5657
2008-07-27
Published