| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4689 | 7.5 |
Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.
|
08-08-2017 - 01:32 | 22-10-2008 - 18:00 | |
| CVE-2008-4688 | 5.0 |
core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source anchor, which allows remote attackers to discover an issue's title and status via a request with a modified i
|
10-02-2009 - 06:56 | 22-10-2008 - 18:00 |