Debian Linux Security Advisory 3120-1 - Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code.
8b72c564f64e337de7047ae5659136032afcdbff013f3cec70d686cb7d778df9
Mantis BugTracker version 1.2.17 suffers from denial of service, potential cross site scripting, and arbitrary redirection vulnerabilities.
73dc034d9a5622082847c13fa1d43e825d41a1ee7d9873124267bbb560c947f2