PT-2020-17005

Name of the Vulnerable Software and Affected Versions MantisBT version 2.24.3 Description The issue is related to SQL Injection that can occur in the access parameter of the mc project get users function through the API SOAP. Recommendations For MantisBT version 2.24.3, consider disabling the mc...

MantisBT SQL Injection Vulnerability

MantisBT is a lightweight, free and open source, web-based defect tracking system. A SQL injection vulnerability exists in the "access" parameter of the mcprojectgetusers function in MantisBT 2.24.3. An attacker can exploit this vulnerability via API SOAP to conduct SQL injection attacks...