CVE-2008-3332
Mantis < 1.1.2 - Authenticated Remote Code Execution via adm_config_set.php Value Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-3332. PoCs published by USH.
AI-analyzed exploit summary This is a detailed advisory describing multiple vulnerabilities in Mantis Bug Tracker 1.1.1, including XSS, CSRF, and Remote Code Execution. It provides proof-of-concept URLs and technical analysis but does not contain executable exploit code.
Description
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter.
Exploits (1)
This is a detailed advisory describing multiple vulnerabilities in Mantis Bug Tracker 1.1.1, including XSS, CSRF, and Remote Code Execution. It provides proof-of-concept URLs and technical analysis but does not contain executable exploit code.