mantis

• Author: kikadf
• Vulnerable: 1.2.8-1
• Unaffected: 1.2.8-2arcturus1

Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1608
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1609