NVD CVE-2014-9388 December 17, 2014 007admin Leave a comment bug_report.php in MantisBT before 1.2.18 allows remote attackers to assign arbitrary issues via the handler_id parameter.