CVE-2010-4350

Directory traversal vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.

• CWE-22

• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html
• http://openwall.com/lists/oss-security/2010/12/15/5Exploit, Patch
• http://openwall.com/lists/oss-security/2010/12/16/2Exploit, Patch
• http://secunia.com/advisories/42772
• http://secunia.com/advisories/51199
• http://security.gentoo.org/glsa/glsa-201211-01.xml
• http://www.mantisbt.org/blog/?p=123
• http://www.mantisbt.org/bugs/changelog_page.php?version_id=112Exploit, Patch
• http://www.mantisbt.org/bugs/view.php?id=12607
• http://www.vupen.com/english/advisories/2011/0002
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4984.phpExploit, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=663230Exploit, Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html
• http://openwall.com/lists/oss-security/2010/12/15/5Exploit, Patch
• http://openwall.com/lists/oss-security/2010/12/16/2Exploit, Patch
• http://secunia.com/advisories/42772
• http://secunia.com/advisories/51199
• http://security.gentoo.org/glsa/glsa-201211-01.xml
• http://www.mantisbt.org/blog/?p=123
• http://www.mantisbt.org/bugs/changelog_page.php?version_id=112Exploit, Patch
• http://www.mantisbt.org/bugs/view.php?id=12607
• http://www.vupen.com/english/advisories/2011/0002
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4984.phpExploit, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=663230Exploit, Patch

Published

Jan 3, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4344Heap-based buffer overflow in the string_vformat function in…9.8
• CVE-2010-4345Exim 4.72 and earlier allows local users to gain privileges …7.8
• CVE-2010-4346The install_special_mapping function in mm/mmap.c in the Lin…
• CVE-2010-4347The ACPI subsystem in the Linux kernel before 2.6.36.2 uses …
• CVE-2010-4348Cross-site scripting (XSS) vulnerability in admin/upgrade_un…
• CVE-2010-4349admin/upgrade_unattended.php in MantisBT before 1.2.4 allows…
• CVE-2010-4351The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before …
• CVE-2010-4352Stack consumption vulnerability in D-Bus (aka DBus) before 1…
• CVE-2010-4353Unrestricted file upload vulnerability in modules/gallery/mo…
• CVE-2010-4354The remote-access IPSec VPN implementation on Cisco Adaptive…
• CVE-2010-4355Cross-site scripting (XSS) vulnerability in DaDaBIK before 4…
• CVE-2010-4356SQL injection vulnerability in news_default.asp in Site2Nite…