2 matches found
Sql injection
SQL injection vulnerability in the mcifileget function in api/soap/mcfileapi.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in a mcissueattachmentget SOAP request...
7.5CVSS8.4AI score0.03049EPSS
SaveExploits2References8Affected Software2
CVE-2014-1608: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the mcifileget function in api/soap/mcfileapi.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in a mcissueattachmentget SOAP request...
7.5CVSS6.4AI score0.03049EPSS
SaveExploits2References2
20