SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via the filter_config_id parameter.

The remote web server is hosting MantisBT, an open source bug tracking application written in PHP.

Versions of MantisBT 1.2.13 prior to 1.2.17 are affected by an input validation error related to the 'filter_config_id' parameter in the script 'admin_config_report.php', which could allow SQL injection attacks. This may allow an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

According to its version number, the MantisBT application hosted on the remote web server is 1.2.13 or later but prior to 1.2.17. It is, therefore, affected by an input validation error related to the 'filter_config_id' parameter in the script 'admin_config_report.php', which could allow SQL injection attacks.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

new upstream release, fixing security issues :

  - CVE-2014-1608

  - CVE-2014-1609

  - CVE-2014-2238

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
8901	MantisBT 1.2.13 < 1.2.17 SQLi	Nessus Network Monitor	CGI	medium
80913	MantisBT 1.2.13 - 1.2.16 'admin_config_report.php' SQLi	Nessus	CGI abuses	medium
72973	Fedora 19 : mantis-1.2.17-1.fc19 (2014-3440)	Nessus	Fedora Local Security Checks	high
72970	Fedora 20 : mantis-1.2.17-1.fc20 (2014-3421)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-2238

high

Tenable Plugins

medium

medium

high

high