SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitr…CVE-2014-2238Mantisbt · 11% likely

   CWE-89

2. In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.CVE-2020-28413Mantisbt · CVSS 5.3 · 4.8% likely

   CWE-89

3. SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a craf…CVE-2014-1608Mantisbt · 3.0% likely

   CWE-89

4. Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the (1) mc_project_get_atta…CVE-2014-1609Mantisbt · 3.0% likely

   CWE-89

5. SQL injection vulnerability in the mc_project_get_attachments function in api/soap/mc_project_api.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary SQL co…CVE-2014-8554Mantisbt · 2.4% likely

   CWE-89

6. Multiple SQL injection vulnerabilities in view_all_bug_page.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir para…CVE-2014-9089Mantisbt · 2.4% likely

   CWE-89

7. SQL injection vulnerability in manage_user_page.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary…CVE-2014-9573Mantisbt · 1.4% likely

   CWE-89

8. MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql parameter in a request to the 127.0.0.1 IP address. NOTE: the ven…CVE-2018-6382Mantisbt · 0.5% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.