CVE-2004-1731: signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple user...

Security readout for executives and security teams

This old Mantis bugtracker issue lets a remote attacker abuse public signup to send repeated registration emails to the same victim address. The primary business impact is nuisance, mail abuse, and possible mail reputation harm, not system takeover or data theft based on the supplied evidence. Exposure is most likely where an internet-facing Mantis bugtracker instance has public self-registration enabled and sends signup emails. The source bundle does not identify exact affected versions. Treat as a hygiene and abuse-prevention issue. Prioritize internet-facing Mantis instances because abuse can affect recipients and mail reputation, but supplied evidence does not indicate compromise, data exposure, or known active exploitation. Mitigation focus: Check current Mantis vendor guidance for affected versions and fixed releases.; Disable or restrict public self-registration if it is not required.; Review signup email throttling, abuse controls, and duplicate-address handling..

Prepared

Jun 29, 2026, 23:55 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.