CVE-2010-4349: CVE-2010-4349

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2010-4349

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db_type parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

MantisBT 'upgrade_unattended.php'信息泄漏漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

MantisBT是MantisBT团队的一套基于Web的开源缺陷跟踪系统。该系统以Web操作的形式提供项目管理及缺陷跟踪服务。 MantisBT 1.2.4之前版本中的admin/upgrade_unattended.php文件中存在信息泄露漏洞。远程攻击者可以借助无效db_type参数(在错误消息中显示了安装路径)获取敏感信息。该漏洞与MantisBT不安全调用基于PHP的ADOdb库中的某个函数有关。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2010-4349

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2010-4349

Please Login to view more intelligence information

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4983.phpx_refsource_MISC
http://www.mantisbt.org/blog/?p=123x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=663230x_refsource_CONFIRM
http://www.mantisbt.org/bugs/view.php?id=12607x_refsource_CONFIRM
http://www.mantisbt.org/bugs/changelog_page.php?version_id=112x_refsource_CONFIRM
http://secunia.com/advisories/42772third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/51199third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2011/0002vdb-entryx_refsource_VUPEN
http://security.gentoo.org/glsa/glsa-201211-01.xmlvendor-advisoryx_refsource_GENTOO
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.htmlvendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.htmlvendor-advisoryx_refsource_FEDORA
https://exchange.xforce.ibmcloud.com/vulnerabilities/64463vdb-entryx_refsource_XF
http://openwall.com/lists/oss-security/2010/12/15/4mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2010/12/16/1mailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2010-4349

New Vulnerabilities

Product: n/a

Vendor: n/a

V. Comments for CVE-2010-4349

No comments yet

Support Us — Your donation helps us keep running

I. Basic Information for CVE-2010-4349

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2010-4349

III. Intelligence Information for CVE-2010-4349

New Vulnerabilities

V. Comments for CVE-2010-4349

Leave a comment