CVE-2024-45523

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attemp...

CVE-2024-45523

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attemp...

CVE-2024-45523

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attemp...

CVE-2024-45523

An unauthenticated attacker can cause a resource leak in Bravura Security Fabric by issuing multiple failed login attempts via API SOAP . Affected versions include 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12....

PT-2024-31680

Name of the Vulnerable Software and Affected Versions: Bravura Security Fabric versions 12.3.x through 12.3.5.32783 Bravura Security Fabric versions 12.4.x through 12.4.3.35109 Bravura Security Fabric versions 12.5.x through 12.5.2.35949 Bravura Security Fabric versions 12.6.x through 12.6.2.3718...

CVE-2024-45523

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attemp...

CVE-2024-45523: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attemp...

MantisBT SQL Injection via mc_project_get_users function

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...

GHSA-49W9-82CJ-XR48 MantisBT SQL Injection via mc_project_get_users function

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...

CVE-2020-28413

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...

CVE-2020-28413

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...

Sql injection

In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mcprojectgetusers function through the API SOAP...

CVE-2020-28413

CVE-2020-28413 affects MantisBT 2.24.3, where the SQL injection occurs in the parameter “access” of the mc_project_get_users function via the SOAP API. The vulnerability is triggered remotely over the network with low attack complexity, as indicated by the CVSS vectors (v3.1: AV:N/AC:L/PR:L/UI:N/...

CVE-2014-8553

The mciaccountgetarraybyid function in api/soap/mcaccountapi.php in MantisBT before 1.2.18 allows remote attackers to obtain sensitive information via a 1 mcprojectgetusers, 2 mcissueget, 3 mcfiltergetissues, or 4 mcprojectgetissues SOAP request...

PT-2014-8614

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.18 Description The issue allows remote attackers to obtain sensitive information. This can be achieved via specific SOAP requests, including mc project get users, mc issue get, mc filter get issues, or mc project...

PT-2014-8615

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.18 Description The issue is related to a SQL injection vulnerability in the mc project get attachments function. This vulnerability allows remote attackers to execute arbitrary SQL commands via the project id...

PT-2014-4254

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.16 Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified parameters to various functions, including mc project get attachments in api/soap/mc project api.php, news get...

CVE-2014-1609: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the 1 mcprojectgetattachments function in api/soap/mcprojectapi.php; the 2 newsgetlimitedrows function in core/newsapi.php; the 3...

PT-2014-4253

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.16 Description The issue allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in a "mc issue attachment get" SOAP request. This is due to a SQL injection vulnerability in the mci...

CVE-2012-1123: Improper Authentication

The mcichecklogin function in api/soap/mcapi.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password...