CVE-2014-7146 The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is....
HighCVSS 7.5
EPSS 50.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e modifier.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mantisbt | = 1.2.17 | No fix listed |
References
- [oss-security] 20141108 CVE-2014-7146: MantisBT XmlImportExport plugin PHP Code Injection Vulnerability mailing-list
- 62101 third-party-advisory
- DSA-3120 vendor-advisory
- www.mantisbt.org
- 70993 vdb-entry
- mantisbt-cve20147146-code-exec(98572) vdb-entry
- github.com vendor-advisory
- github.com vendor-advisory