2 matches found
CVE-2014-9573
SQL injection vulnerability in manageuserpage.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary SQL commands via the MANTISMANAGEUSERSCOOKIE cookie...
6CVSS8.1AI score0.01404EPSS
SaveExploits3References8
CVE-2014-9573: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in manageuserpage.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary SQL commands via the MANTISMANAGEUSERSCOOKIE cookie...
6CVSS6.4AI score0.01404EPSS
SaveExploits3References2
20