Lucene search
MitreCVELIST:CVE-2014-7146HistoryNov 18, 2014 - 3:00 p.m.
CVE-2014-7146
2014-11-1815:00:00
mitre
www.cve.org
6
The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e modifier.
References
seclists.org/oss-sec/2014/q4/576
secunia.com/advisories/62101
www.debian.org/security/2015/dsa-3120
www.mantisbt.org/bugs/view.php?id=17725
www.securityfocus.com/bid/70993
exchange.xforce.ibmcloud.com/vulnerabilities/98572
github.com/mantisbt/mantisbt/commit/84017535
github.com/mantisbt/mantisbt/commit/bed19db9
Related
zdt
zdt
MantisBT XmlImportExport Plugin PHP Code Injection Exploit
2014-11-16 00:00:00
MantisBT XmlImportExport Plugin PHP Code Injection Exploit
2014-11-18 00:00:00
Mantis Bug Tracker 1.2.17 PHP Code Injection Vulnerability
2015-01-01 00:00:00
cve
cve
CVE-2014-7146
2014-11-18 15:59:02
CVE-2014-8598
2014-11-18 15:59:06
prion
prion
Code injection
2014-11-18 15:59:00
Code injection
2014-11-18 15:59:00
packetstorm
packetstorm
Mantis Bug Tracker 1.2.17 PHP Code Injection
2014-12-31 00:00:00
MantisBT XmlImportExport Plugin PHP Code Injection
2014-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2014-7146
2014-11-18 00:00:00
CVE-2014-8598
2014-11-18 00:00:00
securityvulns
securityvulns
exploitdb
exploitdb
nvd
nvd
CVE-2014-7146
2014-11-18 15:59:02
CVE-2014-8598
2014-11-18 15:59:06
metasploit
metasploit
MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability
2014-11-09 13:00:44
archlinux
archlinux
mantisbt: arbitrary code execution and unrestricted access
2014-11-12 00:00:00
cvelist
cvelist
CVE-2014-8598
2014-11-18 15:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mantis-1.2.17-4.fc21
2014-12-12 04:21:50
[SECURITY] Fedora 20 Update: mantis-1.2.17-4.fc20
2014-12-12 04:30:46
[SECURITY] Fedora 21 Update: mantis-1.2.19-1.fc21
2015-02-07 04:03:22
nessus
nessus
Fedora 19 : mantis-1.2.17-4.fc19 (2014-15079)
2014-12-15 00:00:00
Fedora 20 : mantis-1.2.17-4.fc20 (2014-15108)
2014-12-15 00:00:00
Fedora 21 : mantis-1.2.17-4.fc21 (2014-15142)
2014-12-15 00:00:00
openvas
openvas
Fedora Update for mantis FEDORA-2014-15142
2015-01-05 00:00:00
Fedora Update for mantis FEDORA-2014-15108
2014-12-12 00:00:00
Fedora Update for mantis FEDORA-2015-1419
2015-02-07 00:00:00
debian
debian
[SECURITY] [DSA 3120-1] mantis security update
2015-01-06 20:35:26
osv
osv
mantis - security update
2015-01-06 00:00:00