NVD

Id
35877  
Name
CVE-2014-9089  
Description
Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to view_all_set.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-28  
Modified Date
2017-01-02  
Seq
2014-9089  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183682 35877 CVE-2014-9089 62101  View
183683 35877 CVE-2014-9089 DSA-3120  View
183684 35877 CVE-2014-9089 [oss-security] 20141126 CVE Request: MantisBT SQL injection in view_all_set.php  View
183685 35877 CVE-2014-9089 [oss-security] 20141126 Re: CVE Request: MantisBT SQL injection in view_all_set.php  View
183686 35877 CVE-2014-9089 71298  View
183687 35877 CVE-2014-9089 https://github.com/mantisbt/mantisbt/commit/b0021673ab23249244119bde3c7fcecd4daa4e7f  View
183688 35877 CVE-2014-9089 https://www.mantisbt.org/bugs/view.php?id=17841  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16805 JVNDB-2014-005680 MantisBT の view_all_bug_page.php における SQL インジェクションの脆弱性 MantisBT の view_all_bug_page.php には、SQL インジェクションの脆弱性が存在します。 CVE-2014-9089 76382 CVE-2014-9089 35877 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005680.html 2014-11-26 2014-12-01 View