CVE-2019-15715

HIGH

MantisBT < 1.3.20 - Authenticated Remote Code Execution via Command Injection

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2019-15715. PoCs published by Nikolas Geiselman, mcornaglia.

AI-analyzed exploit summary This exploit chains CVE-2017-7615 (password reset) and CVE-2019-15715 (command injection) to achieve unauthenticated RCE in Mantis Bug Tracker 2.3.0. It resets the admin password, logs in, configures malicious settings, and triggers a reverse shell.

Description

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

Exploits (2)

exploitdb WORKING POC

by Nikolas Geiselman · pythonwebappsphp

https://www.exploit-db.com/exploits/48818

View Code ZIP pw:eip

This exploit chains CVE-2017-7615 (password reset) and CVE-2019-15715 (command injection) to achieve unauthenticated RCE in Mantis Bug Tracker 2.3.0. It resets the admin password, logs in, configures malicious settings, and triggers a reverse shell.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Mantis Bug Tracker 2.3.0

No auth needed

Prerequisites: Network access to the target · Mantis Bug Tracker 2.3.0 with default configurations

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1059 - Command and Scripting Interpreter T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

nomisec WORKING POC

by mcornaglia · poc

https://github.com/mcornaglia/CVE-2019-15715

View Code ZIP pw:eip

This repository contains a functional Python exploit for CVE-2019-15715, targeting Mantis Bug Tracker versions <=2.22.0. The exploit leverages unauthenticated remote code execution by manipulating configuration options to inject a reverse shell payload.