CVE-2014-2238 | BDVDB-2026-60207 Detail

Description#

SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2014/q1/456
http://seclists.org/oss-sec/2014/q1/490
http://www.securityfocus.com/bid/65903
http://mantisbt.domainunion.de/bugs/view.php?id=17055
http://www.mantisbt.org/blog/?p=288
https://exchange.xforce.ibmcloud.com/vulnerabilities/91563

Exploit#

No public exploit known

History#

Version 12014-03-05Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.