HTTP: Mantis "summary_graph_functions.php" Arbitrary Code Execution
This signature detects attempts to exploit a known vulnerability in Mantis, an open source Web-based bug tracking system. Mantis 0.17.3 and earlier versions are vulnerable. Attackers can send a maliciously crafted URL to cause the Web server to download PHP code from a remote server, allowing the attacker to execute arbitrary code with the permissions of the user that is running the Web server daemon.
Extended Description
An attacker could execute arbitrary code on the Mantis server.
References
Short Name
HTTP:PHP:MANTIS-ARB-EXEC1
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
"summary_graph_functions.php" Arbitrary Code Execution Mantis
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown