{"vulnerability": "CVE-2014-7146", "sightings": [{"uuid": "6f7dfb2a-99c2-44b5-946a-e5dcede0bddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7146", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41685", "content": "", "creation_timestamp": "2014-11-18T00:00:00.000000Z"}, {"uuid": "68fe89a9-e6fa-4e13-ab0e-81f9a7675936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7146", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "23a5831d-3b2f-460a-a159-e0b4a5606b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7146", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:31.000000Z"}, {"uuid": "538d6730-d839-4735-982d-3949917e18fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7146", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mantisbt_php_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "1af14707-131e-4981-84ba-e22580318f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2014-7146", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35283", "content": "", "creation_timestamp": "2014-11-18T00:00:00.000000Z"}, {"uuid": "f49662a6-8331-4fde-bc1b-68d97d8bd9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7146", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mantisbt_php_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Egidio Romano\", \"Juan Escobar \", \"Christian Mehlmauer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a post-auth vulnerability found in MantisBT versions 1.2.0a3 up to 1.2.17 when the Import/Export plugin is installed.\\n          The vulnerable code exists on plugins/XmlImportExport/ImportXml.php, which receives user input through the \\\"description\\\" field and the \\\"issuelink\\\" attribute of an uploaded XML file and passes to preg_replace() function with the /e modifier.\\n          This allows a remote authenticated attacker to execute arbitrary PHP code on the remote machine.\\n          This version also suffers from another issue. The import page is not checking the correct user level\\n          of the user, so it's possible to exploit this issue with any user including the anonymous one if enabled.\", \"disclosure_date\": \"2014-11-08\", \"fullname\": \"exploit/multi/http/mantisbt_php_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/mantisbt_php_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 500, \"ref_name\": \"multi/http/mantisbt_php_exec\", \"references\": [\"CVE-2014-7146\", \"CVE-2014-8598\", \"URL-https://www.mantisbt.org/bugs/view.php?id=17725\", \"URL-https://www.mantisbt.org/bugs/view.php?id=17780\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:02.036776Z"}]}