CVE-2014-2238 in MantisBTinfo

Summary

SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

02/28/2014

Disclosure

03/05/2014

Entries

1

CPE

ready

CWE

CWE-89

Exploit

Download

CVSS

6.3

EPSS

0.45353

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-2238
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-2238
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-2238/

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!