Published: 14/12/2005 Updated: 08/03/2011

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the target_field parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mantis mantis 0.11.1
mantis mantis 0.12
mantis mantis 0.14.4
mantis mantis 0.14.5
mantis mantis 0.15.12
mantis mantis 0.15.2
mantis mantis 0.15.9
mantis mantis 0.16
mantis mantis 0.17.3
mantis mantis 0.17.4
mantis mantis 0.17.4a
mantis mantis 0.18.2
mantis mantis 0.18.3
mantis mantis 0.19.1
mantis mantis 0.19.2
mantis mantis 1.0.0a2
mantis mantis 1.0.0a3
mantis mantis 0.13
mantis mantis 0.13.1
mantis mantis 0.14.6
mantis mantis 0.14.7
mantis mantis 0.14.8
mantis mantis 0.15.3
mantis mantis 0.15.4
mantis mantis 0.16.0
mantis mantis 0.16.1
mantis mantis 0.17.5
mantis mantis 0.18
mantis mantis 0.18a1
mantis mantis 0.19.0
mantis mantis 0.19.3
mantis mantis 0.9
mantis mantis 0.10.2
mantis mantis 0.11
mantis mantis 0.14.2
mantis mantis 0.14.3
mantis mantis 0.15.10
mantis mantis 0.15.11
mantis mantis 0.15.7
mantis mantis 0.15.8
mantis mantis 0.17.1
mantis mantis 0.17.2
mantis mantis 0.18.0a3
mantis mantis 0.18.0a4
mantis mantis 0.19.0a1
mantis mantis 0.19.0a2
mantis mantis 1.0.0_rc2
mantis mantis 1.0.0_rc3
mantis mantis 1.0.0a1
mantis mantis 0.10
mantis mantis 0.10.1
mantis mantis 0.14
mantis mantis 0.14.1
mantis mantis 0.15
mantis mantis 0.15.1
mantis mantis 0.15.5
mantis mantis 0.15.6
mantis mantis 0.17
mantis mantis 0.17.0
mantis mantis 0.18.0_rc1
mantis mantis 0.18.0a2
mantis mantis 0.19.0_rc1
mantis mantis 0.19.0a
mantis mantis 0.9.1
mantis mantis 1.0.0_rc1

Several security related problems have been discovered in Mantis, a web-based bug tracking system The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4238 Missing input sanitising allows remote attackers to inject arbitrary web script or HTML CVE-2005-4518 Tobias Klein discovered that Mantis a ...

source: wwwsecurityfocuscom/bid/15842/info Mantis is prone to a cross-site scripting vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected sit ...

NVD-CWE-Other http://www.securityfocus.com/bid/15842 http://secunia.com/advisories/18018 http://www.debian.org/security/2005/dsa-944 http://secunia.com/advisories/18481 http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html http://www.vupen.com/english/advisories/2005/2874 https://nvd.nist.gov https://www.debian.org/security/./dsa-944 https://www.exploit-db.com/exploits/26798/

CVE-2005-4238

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect