CVE-2017-12419 | BDVDB-2026-88481 Detail

Description#

If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'admin' directory (as recommended in the "Post-installation and upgrade tasks" section of the MantisBT Admin Guide), and the MySQL client has a local_infile setting enabled (in php.ini mysqli.allow_local_infile, or the MySQL client config file, depending on the PHP setup), an attacker may take advantage of MySQL's "connect file read" feature to remotely access files on the MantisBT server.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-08-05Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.