Vulnerability record · CVE-2008-4688 · published 22 October 2008

CVE-2008-4688: Mantis information exposure vulnerability

Mantis · Mantis

core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified issue number.

5.0 CVSS 2.0 Medium EPSS 12% · top 4.1% CWE-200 · Information exposure

5.0CVSS 2.0 base score

12%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

16References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Mantis Mantis

References

Link	Tags
http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/string_api.php?r1=5285&r2=5384&p
http://secunia.com/advisories/32243
http://secunia.com/advisories/32975
http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml
http://www.mantisbt.org/bugs/changelog_page.php
http://www.mantisbt.org/bugs/view.php?id=9321
http://www.openwall.com/lists/oss-security/2008/10/20/1
http://www.securityfocus.com/bid/31868
http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/string_api.php?r1=5285&r2=5384&p
http://secunia.com/advisories/32243
http://secunia.com/advisories/32975
http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml
http://www.mantisbt.org/bugs/changelog_page.php
http://www.mantisbt.org/bugs/view.php?id=9321
http://www.openwall.com/lists/oss-security/2008/10/20/1
http://www.securityfocus.com/bid/31868

Track CVE-2008-4688 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6515Mantis vulnerabilityMantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged role, which has unknown impact a…EPSS 1.4%14 Dec 2006 10.0CVE-2006-0665Mantis vulnerabilityUnspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: t…EPSS 1.8%13 Feb 2006 10.0CVE-2002-1110Mantis vulnerabilityMultiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain p…EPSS 2.2%4 Oct 2002 9.0CVE-2008-4687Mantis manage_proj_page.php sort parameter code injectionMantis before 1.1.4 passes the sort parameter from manage_proj_page.php into create_function within the multi_sort function in core/utility_api.php, …EPSS 67%analysed22 Oct 2008 7.5CVE-2008-4689Mantis improper authentication vulnerabilityMantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.EPSS 2.5%22 Oct 2008 7.5CVE-2008-3333Mantis path traversal vulnerabilityDirectory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the …EPSS 2.3%27 Jul 2008 7.5CVE-2006-0146John lim adodb sql injection vulnerabilityThe server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) …EPSS 13%9 Jan 2006 7.5CVE-2006-0147John lim adodb vulnerabilityDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis…EPSS 13%9 Jan 2006

Source: NIST National Vulnerability Database (record CVE-2008-4688), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.