Unscored DSA-3030-1 2 CVEs

mantis - security update

Published Sep 20, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	mantis	1.2.11-1.2+deb7u1

Vulnerabilities 2

Unscored —

CVE-2014-1608

SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows r…

Mar 18, 2014
Unscored —

CVE-2014-1609

Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL comman…

Mar 20, 2014