CVE-2002-1110

CVE-2002-1110 describes multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier versions when the magic_quotes_gpc setting is disabled. This flaw allows unauthenticated remote attackers to achieve full compromise of the application, including privilege escalation and unauthorized database operations, by manipulating form fields. With a CVSS score of 10.0, this vulnerability is considered critical due to its network-based attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.