CVE-2019-15715

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/mantisbt/mantisbt/commit/5fb979604d88c630343b3eaf2b435cd41918c501Patch, Third Party Advisory
https://github.com/mantisbt/mantisbt/commit/7092573fac31eff41823f13540324db167c8bd52Patch, Third Party Advisory
https://github.com/mantisbt/mantisbt/commit/cebfb9acb3686e8904d80bd4bc80720b54ba08e5Patch, Third Party Advisory
https://github.com/mantisbt/mantisbt/commit/fc7668c8e45db55fc3a4b991ea99d2b80861a14cPatch, Third Party Advisory
https://mantisbt.org/bugs/changelog_page.php?project=mantisbtRelease Notes, Vendor Advisory
https://mantisbt.org/bugs/view.php?id=26091Exploit, Issue Tracking, Vendor Advisory
https://mantisbt.org/bugs/view.php?id=26162Exploit, Issue Tracking, Vendor Advisory
http://packetstormsecurity.com/files/159219/Mantis-Bug-Tracker-2.3.0-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/mantisbt/mantisbt/commit/5fb979604d88c630343b3eaf2b435cd41918c501Patch, Third Party Advisory
https://github.com/mantisbt/mantisbt/commit/7092573fac31eff41823f13540324db167c8bd52Patch, Third Party Advisory
https://github.com/mantisbt/mantisbt/commit/cebfb9acb3686e8904d80bd4bc80720b54ba08e5Patch, Third Party Advisory
https://github.com/mantisbt/mantisbt/commit/fc7668c8e45db55fc3a4b991ea99d2b80861a14cPatch, Third Party Advisory
https://mantisbt.org/bugs/changelog_page.php?project=mantisbtRelease Notes, Vendor Advisory
https://mantisbt.org/bugs/view.php?id=26091Exploit, Issue Tracking, Vendor Advisory
https://mantisbt.org/bugs/view.php?id=26162Exploit, Issue Tracking, Vendor Advisory

Timeline

Published: Oct 9, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-157165.5WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read passwords or API keys i CVE-2019-157179.8Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.CVE-2019-157184.4In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus CVE-2019-157198.0Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails t CVE-2019-15727.5PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.CVE-2019-157207.8CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modif CVE-2019-157215.4An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group m CVE-2019-157227.5An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical expressions in GitLab Markdo CVE-2019-157235.3An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1. Merge requests created by email could CVE-2019-157246.1An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection CVE-2019-157257.5An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in d CVE-2019-157265.3An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be poin