CVE-2002-1113

Published: Oct 4, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code.

Affected (16)

Products: Mantis: Mantis

Mantis

1 product

Mantis

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mantis Mantis	Version 0.15.10
Mantis Mantis	Version 0.15.11
Mantis Mantis	Version 0.15.12
Mantis Mantis	Version 0.15.3
Mantis Mantis	Version 0.15.4
Mantis Mantis	Version 0.15.5
Mantis Mantis	Version 0.15.6
Mantis Mantis	Version 0.15.7
Mantis Mantis	Version 0.15.8
Mantis Mantis	Version 0.15.9
Mantis Mantis	Version 0.16.0
Mantis Mantis	Version 0.16.1
Mantis Mantis	Version 0.17.0
Mantis Mantis	Version 0.17.1
Mantis Mantis	Version 0.17.2
Mantis Mantis	Version 0.17.3