rapid7/metasploit-framework — pull request #3057 by brandonprry (2014-03-03 20:42:51+00:00)
Title: MantisBT 1.2.13-1.2.16 Arbitrary File Read via SQLi

http://www.mantisbt.org/bugs/view.php?id=17055

This module exploits the above vulnerability to read arbitrary files from the file system.

Can download vulnerable releases here:

http://sourceforge.net/projects/mantisbt/files/mantis-stable/