1.1.0a1

DATE	CVE	VULNERABILITY TITLE	RISK
2008-07-27	CVE-2008-3333	Path Traversal vulnerability in Mantis Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php). network low complexity mantis CWE-22	7.5
2008-07-27	CVE-2008-3332	Code Injection vulnerability in Mantis Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary code via the value parameter. network low complexity mantis CWE-94	6.5
2008-07-27	CVE-2008-3331	Cross-Site Scripting vulnerability in Mantis Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter. network mantis CWE-79	3.5
2008-01-23	CVE-2008-0404	Cross-Site Scripting vulnerability in Mantis Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary. network mantis CWE-79	4.3