CVE-2014-9388

bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter.

Date published : 2014-12-17

https://www.mantisbt.org/bugs/changelog_page.php?version_id=191

https://www.mantisbt.org/bugs/view.php?id=17878