Full title: MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure Category: web applications Platform: php # 0day.today @ http://0day.today/