Summary
There are multiple SQL Injection vulnerabilities in MantisBT which allow a remote attacker to access or modify data.
Impact
A remote attacker can compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Solution
Upgrade to verion 1.2.16 or higher.
Insight
Use of db_query() instead of db_query_bound() allowed SQL injection attacks due to unsanitized use of parameters within the query when using the SOAP API mc_project_get_attachments, news_get_limited_rows, summary_print_by_enum, summary_print_by_age, summary_print_by_developer, summary_print_by_reporter, summary_print_by_category, create_bug_enum_summary, enum_bug_group function and mc_issue_attachment_get.
Affected
MantisBT Version 1.2.15 and prior.
Detection
Check the version
References
Severity
Classification
-
CVE CVE-2014-1608, CVE-2014-1609 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities