{
    "id": "CVE-2008-4687",
    "published": "2008-10-22 18:00:01",
    "last_modified": "2026-06-16 22:58:19",
    "cvss_score": "9.0",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
    "cwe": "CWE-94",
    "description": "manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.",
    "epss_score": "0.67453",
    "epss_percentile": "0.99287",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:16:18",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "mantis",
            "product": "mantis"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "44611",
            "title": "Mantis Bug Tracker 1.1.3 - 'manage_proj_page' PHP Code Execution (Metasploit)",
            "date": "2018-05-10",
            "url": "https://www.exploit-db.com/exploits/44611"
        },
        {
            "source": "exploit-db",
            "ref_id": "6768",
            "title": "Mantis Bug Tracker 1.1.3 - Remote Code Execution",
            "date": "2008-10-16",
            "url": "https://www.exploit-db.com/exploits/6768"
        }
    ],
    "refs_list": [
        "http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/utility_api.php?r1=5679&r2=5678&pathrev=5679",
        "http://secunia.com/advisories/32314",
        "http://secunia.com/advisories/32975",
        "http://securityreason.com/securityalert/4470",
        "http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml",
        "http://www.mantisbt.org/bugs/changelog_page.php",
        "http://www.mantisbt.org/bugs/view.php?id=0009704",
        "http://www.openwall.com/lists/oss-security/2008/10/19/1",
        "http://www.securityfocus.com/bid/31789",
        "https://bugs.gentoo.org/show_bug.cgi?id=242722",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/45942",
        "https://www.exploit-db.com/exploits/44611/",
        "https://www.exploit-db.com/exploits/6768",
        "http://mantisbt.svn.sourceforge.net/viewvc/mantisbt/branches/BRANCH_1_1_0/mantisbt/core/utility_api.php?r1=5679&r2=5678&pathrev=5679",
        "http://secunia.com/advisories/32314",
        "http://secunia.com/advisories/32975",
        "http://securityreason.com/securityalert/4470",
        "http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml",
        "http://www.mantisbt.org/bugs/changelog_page.php",
        "http://www.mantisbt.org/bugs/view.php?id=0009704",
        "http://www.openwall.com/lists/oss-security/2008/10/19/1",
        "http://www.securityfocus.com/bid/31789",
        "https://bugs.gentoo.org/show_bug.cgi?id=242722",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/45942",
        "https://www.exploit-db.com/exploits/44611/"
    ]
}