Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).
Max CVSS
7.5
EPSS Score
0.97%
Published
2008-07-27
Updated
2017-08-08
1 vulnerabilities found