ID de Prueba:	1.3.6.1.4.1.25623.1.0.805973
Categoría:	Web application abuses
Título:	MantisBT 1.2.x < 1.2.19 Open Redirect Vulnerability - Linux
Resumen:	MantisBT is prone to an open redirect vulnerability.
Descripción:	Summary: MantisBT is prone to an open redirect vulnerability. Vulnerability Insight: The flaw is due to use of an incorrect regular expression within string_sanitize_url function in core/string_api.php script. Vulnerability Impact: Successful exploitation will allow remote attackers to create a specially crafted URL, that if clicked, would redirect a victim from the intended legitimate web site to an arbitrary web site of the attacker's choosing. Affected Software/OS: MantisBT versions 1.2.0a3 through 1.2.18. Solution: Update to version 1.2.19 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1042 http://seclists.org/fulldisclosure/2015/Jan/110 http://packetstormsecurity.com/files/130142/Mantis-BugTracker-1.2.19-Open-Redirect.html http://www.openwall.com/lists/oss-security/2015/01/10/5 http://www.openwall.com/lists/oss-security/2015/01/11/8 http://www.securitytracker.com/id/1031633
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.