CVE-2014-7146: mantisbt Improper Input Validation

CVSS: 7.5v2.0HighModified

Published 18-11-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-7146 is a high (CVSS 7.5) Improper Input Validation vulnerability in mantisbt. EPSS estimates a 50.56% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

50/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

50.56%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1

DSA-3120-1

Timeline

18-11-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The XmlImportExport plugin in MantisBT 1.2.17 and earlier allows remote attackers to execute arbitrary PHP code via a crafted (1) description field or (2) issuelink attribute in an XML file, which is not properly handled when executing the preg_replace function with the e modifier.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

50.56%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 50.56% on 20-09-2026

20-09-202620-10-2026

EPSS score

50.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databasemultipleVerified
Mantis Bug Tracker 1.2.0a3 < 1.2.17 XmlImportExport Plugin - PHP Code Injection (Metasploit) (1)
Maturity: poc
exploit-databaseremotephpVerified
Mantis Bug Tracker 1.2.0a3 < 1.2.17 XmlImportExport Plugin - PHP Code Injection (Metasploit) (2)
Maturity: weaponized
MetasploitremoteVerified
MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability
exploit/multi/http/mantisbt_php_exec
Maturity: weaponized