Lucene search

K
cvelistMitreCVELIST:CVE-2014-9279
HistoryDec 08, 2014 - 4:00 p.m.

CVE-2014-9279

2014-12-0816:00:00
mitre
www.cve.org
6

AI Score

5.4

Confidence

High

EPSS

0.005

Percentile

76.4%

The print_test_result function in admin/upgrade_unattended.php in MantisBT 1.1.0a3 through 1.2.x before 1.2.18 allows remote attackers to obtain database credentials via a URL in the hostname parameter and reading the parameters in the response sent to the URL.

AI Score

5.4

Confidence

High

EPSS

0.005

Percentile

76.4%