CVE-2004-1731: Mantis

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.

Affected products

• Mantis Mantis: version 0.9 only; version 0.9.1 only; version 0.10 only; version 0.10.1 only; version 0.10.2 only; version 0.11 only; …

Published 2004-08-20. Last modified 2026-06-16.