NVD

Id
30696  
Name
CVE-2014-2238  
Description
SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-05  
Modified Date
2015-11-27  
Seq
2014-2238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161806 30696 CVE-2014-2238 http://mantisbt.domainunion.de/bugs/view.php?id=17055  View
161807 30696 CVE-2014-2238 [oss-security] 20140228 CVE request: MantisBT 1.2.13 SQL injection vulnerability  View
161808 30696 CVE-2014-2238 [oss-security] 20140304 Re: CVE request: MantisBT 1.2.13 SQL injection vulnerability  View
161809 30696 CVE-2014-2238 http://www.mantisbt.org/blog/?p=288  View
161810 30696 CVE-2014-2238 65903  View
161811 30696 CVE-2014-2238 mantisbt-admconfigreport-sql-injection(91563)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12713 JVNDB-2014-001588 MantisBT の管理設定ページにおける SQL インジェクションの脆弱性 MantisBT の管理設定ページ (adm_config_report.php) には、SQL インジェクションの脆弱性が存在します。 CVE-2014-2238 69525 CVE-2014-2238 30696 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001588.html 2014-03-04 2014-03-07 View