Lucene search
Ubuntu.comUB:CVE-2014-8554HistoryNov 13, 2014 - 12:00 a.m.
CVE-2014-8554
2014-11-1300:00:00
ubuntu.com
ubuntu.com
17
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
82.5%
SQL injection vulnerability in the mc_project_get_attachments function in
api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote
attackers to execute arbitrary SQL commands via the project_id parameter.
NOTE: this vulnerability exists because of an incomplete fix for
CVE-2014-1609.
Related
cvelist
cvelist
CVE-2014-8554
2014-11-13 15:00:00
CVE-2014-1609
2014-03-20 16:00:00
prion
prion
Sql injection
2014-11-13 21:32:00
Sql injection
2014-03-20 16:55:00
nvd
nvd
CVE-2014-8554
2014-11-13 21:32:11
CVE-2014-1609
2014-03-20 16:55:12
cve
cve
CVE-2014-8554
2014-11-13 21:32:11
CVE-2014-1609
2014-03-20 16:55:12
openvas
openvas
Fedora Update for mantis FEDORA-2014-15142
2015-01-05 00:00:00
Fedora Update for mantis FEDORA-2014-15108
2014-12-12 00:00:00
MantisBT < 1.2.16 Multiple SQLi Vulnerabilities
2014-03-25 00:00:00
nessus
nessus
Fedora 19 : mantis-1.2.17-4.fc19 (2014-15079)
2014-12-15 00:00:00
Fedora 20 : mantis-1.2.17-4.fc20 (2014-15108)
2014-12-15 00:00:00
MantisBT 1.1.x < 1.2.18 Multiple Vulnerabilities
2015-02-18 00:00:00
archlinux
archlinux
mantisbt: sql injection
2014-11-05 00:00:00
ubuntucve
ubuntucve
CVE-2014-1609
2014-03-20 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3030-1] mantis security update
2014-10-14 00:00:00
[oCERT-2014-001] MantisBT input sanitization errors
2014-02-11 00:00:00
debian
debian
[SECURITY] [DSA 3030-1] mantis security update
2014-09-20 21:26:14
[SECURITY] [DSA 3120-1] mantis security update
2015-01-06 20:35:26
fedora
fedora
[SECURITY] Fedora 20 Update: mantis-1.2.17-1.fc20
2014-03-13 05:07:18
[SECURITY] Fedora 21 Update: mantis-1.2.17-4.fc21
2014-12-12 04:21:50
[SECURITY] Fedora 20 Update: mantis-1.2.17-4.fc20
2014-12-12 04:30:46
osv
osv
mantis - security update
2015-01-06 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
82.5%
Related for UB:CVE-2014-8554