CVE-2002-1112
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
Published: 2004-09-01 · CVSS: Unscored
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7