CVE-2008-4687

EPSS 67.5%

manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.

Affected products

n/a · n/a

public PoCs found — 5

githubgithub.com/nmurilo/CVE-2008-4687-exploit★ 3 githubgithub.com/twisted007/mantis_rce★ 1 cve_referencewww.exploit-db.com/exploits/44611/unverified exploitdbwww.exploit-db.com/exploits/44611unverified cve_referencewww.exploit-db.com/exploits/6768unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/utility_api.php?r1=5679&r2=5678&pathrev=5679 https://bugs.gentoo.org/show_bug.cgi?id=242722 http://secunia.com/advisories/32314 http://secunia.com/advisories/32975 http://securityreason.com/securityalert/4470 https://exchange.xforce.ibmcloud.com/vulnerabilities/45942 https://www.exploit-db.com/exploits/44611/https://www.exploit-db.com/exploits/6768 http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml http://www.mantisbt.org/bugs/changelog_page.php http://www.mantisbt.org/bugs/view.php?id=0009704 http://www.openwall.com/lists/oss-security/2008/10/19/1