auxiliary/gather/mantisbt_admin_sqli

functional

MantisBT Admin SQL Injection Arbitrary File Read

view exploit source metasploittype auxiliarypublished 2014-02-28catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-2238US	medium6.5	11.3% (96th)	Exploit	2014-03-05
SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitra…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.