CVE-2008-3333

Published: Jul 27, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).

Affected (95)

Products: Mantis: Mantis

Mantis

1 product

Mantis

Configuration A

95 vulnerable

Vulnerable Software	Affected Versions
Mantis Mantis	Up to 1.1.1
Mantis Mantis	Version 0.10.0
Mantis Mantis	Version 0.10.1
Mantis Mantis	Version 0.10.2
Mantis Mantis	Version 0.10
Mantis Mantis	Version 0.11.0
Mantis Mantis	Version 0.11.1
Mantis Mantis	Version 0.11
Mantis Mantis	Version 0.12.0
Mantis Mantis	Version 0.12
Mantis Mantis	Version 0.13.0
Mantis Mantis	Version 0.13.1
Mantis Mantis	Version 0.13
Mantis Mantis	Version 0.14.0
Mantis Mantis	Version 0.14.1
Mantis Mantis	Version 0.14.2
Mantis Mantis	Version 0.14.3
Mantis Mantis	Version 0.14.4
Mantis Mantis	Version 0.14.5
Mantis Mantis	Version 0.14.6
Mantis Mantis	Version 0.14.7
Mantis Mantis	Version 0.14.8
Mantis Mantis	Version 0.14
Mantis Mantis	Version 0.15.0
Mantis Mantis	Version 0.15.10
Mantis Mantis	Version 0.15.11
Mantis Mantis	Version 0.15.12
Mantis Mantis	Version 0.15.1
Mantis Mantis	Version 0.15.2
Mantis Mantis	Version 0.15.3
Mantis Mantis	Version 0.15.4
Mantis Mantis	Version 0.15.5
Mantis Mantis	Version 0.15.6
Mantis Mantis	Version 0.15.7
Mantis Mantis	Version 0.15.8
Mantis Mantis	Version 0.15.9
Mantis Mantis	Version 0.15
Mantis Mantis	Version 0.16.0
Mantis Mantis	Version 0.16.1
Mantis Mantis	Version 0.16
Mantis Mantis	Version 0.17.0
Mantis Mantis	Version 0.17.1
Mantis Mantis	Version 0.17.2
Mantis Mantis	Version 0.17.3
Mantis Mantis	Version 0.17.4
Mantis Mantis	Version 0.17.4a
Mantis Mantis	Version 0.17.5
Mantis Mantis	Version 0.17
Mantis Mantis	Version 0.18.0
Mantis Mantis	Version 0.18.0_rc1
Mantis Mantis	Version 0.18.0a1
Mantis Mantis	Version 0.18.0a2
Mantis Mantis	Version 0.18.0a3
Mantis Mantis	Version 0.18.0a4
Mantis Mantis	Version 0.18.1
Mantis Mantis	Version 0.18.2
Mantis Mantis	Version 0.18.3
Mantis Mantis	Version 0.18
Mantis Mantis	Version 0.18a1
Mantis Mantis	Version 0.19.0
Mantis Mantis	Version 0.19.0_rc1
Mantis Mantis	Version 0.19.0a1
Mantis Mantis	Version 0.19.0a2
Mantis Mantis	Version 0.19.0a
Mantis Mantis	Version 0.19.1
Mantis Mantis	Version 0.19.2
Mantis Mantis	Version 0.19.3
Mantis Mantis	Version 0.19.4
Mantis Mantis	Version 0.19
Mantis Mantis	Version 0.9.0
Mantis Mantis	Version 0.9.1
Mantis Mantis	Version 0.9
Mantis Mantis	Version 1.0.0
Mantis Mantis	Version 1.0.0_rc1
Mantis Mantis	Version 1.0.0_rc2
Mantis Mantis	Version 1.0.0_rc3
Mantis Mantis	Version 1.0.0_rc4
Mantis Mantis	Version 1.0.0_rc5
Mantis Mantis	Version 1.0.0a1
Mantis Mantis	Version 1.0.0a2
Mantis Mantis	Version 1.0.0a3
Mantis Mantis	Version 1.0.0rc1
Mantis Mantis	Version 1.0.0rc2
Mantis Mantis	Version 1.0.0rc3
Mantis Mantis	Version 1.0.0rc4
Mantis Mantis	Version 1.0.1
Mantis Mantis	Version 1.0.2
Mantis Mantis	Version 1.0.3
Mantis Mantis	Version 1.0.4
Mantis Mantis	Version 1.0.5
Mantis Mantis	Version 1.0.6
Mantis Mantis	Version 1.0
Mantis Mantis	Version 1.1.0
Mantis Mantis	Version 1.1.0a1
Mantis Mantis	Version 1.1