CVE-2002-1113: Mantis

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code.

Affected products

• Mantis Mantis: version 0.15.3 only; version 0.15.4 only; version 0.15.5 only; version 0.15.6 only; version 0.15.7 only; version 0.15.8 only; …

Published 2002-10-04. Last modified 2026-06-16.