SecBoard
Zurück zur CVE-Übersicht

CVE-2014-2238

MEDIUM(6.5)

AV:N/AC:L/Au:S/C:P/I:P/A:P

Risk Signal Score30/100 — MITTEL
  • CVSS 6.5 — Mittel
  • EPSS 45%

EPSS-Score

45%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

6.5

Technische Schwere

Beschreibung

SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id parameter.

Referenzen