MantisBT 1.2.13-1.2.16 Arbitrary File Read via SQLi

http://www.mantisbt.org/bugs/view.php?id=17055

This module exploits the above vulnerability to read arbitrary files from the file system.

Can download vulnerable releases here:

http://sourceforge.net/projects/mantisbt/files/mantis-stable/