Security Advisory
CVE-2014-9279
5
Vulnerability Description
The print_test_result function in admin/upgrade_unattended.php in MantisBT 1.1.0a3 through 1.2.x before 1.2.18 allows remote attackers to obtain database credentials via a URL in the hostname parameter and reading the parameters in the response sent to the URL.
Published Date
December 8, 2014
Official Source
NIST NVD Advisory