CVE-2018-6526

view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.

• CWE-200

• http://www.securityfocus.com/bid/103065Third Party Advisory, VDB Entry
• https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2
• https://mantisbt.org/bugs/view.php?id=23921Vendor Advisory
• http://www.securityfocus.com/bid/103065Third Party Advisory, VDB Entry
• https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2
• https://mantisbt.org/bugs/view.php?id=23921Vendor Advisory

Published

Feb 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6520SimpleSAMLphp before 1.15.2 allows remote attackers to bypas…
• CVE-2018-6521The sqlauth module in SimpleSAMLphp before 1.15.2 relies on …
• CVE-2018-6522In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgF…
• CVE-2018-6523In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsA…
• CVE-2018-6524In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsA…
• CVE-2018-6525In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsA…
• CVE-2018-6527XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.ph…6.1
• CVE-2018-6528XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in …6.1
• CVE-2018-6529XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D…6.1
• CVE-2018-6530OS command injection vulnerability in soap.cgi (soapcgi_main…9.8
• CVE-2018-6532An issue was discovered in Icinga 2.x through 2.8.1. By send…
• CVE-2018-6533An issue was discovered in Icinga 2.x through 2.8.1. By edit…