CVE-2014-1608

SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL…

published March 18, 2014

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in a mc_issue_attachment_get SOAP request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03049 · 87.4th percentile
Published
2014-03-18T14:00Z
EPSS history
Timeline
  • 18 MAR 14:00Z
    SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL…
    cvelistv5