Cross-Site Scripting Vulnerabilities in Mantis Bug Tracker by MantisBT
CVE-2005-3337

Currently unrated

Key Information:

Vendor: Mantis
Status: Mantis
Vendor: CVE Published:; 27 October 2005

What is CVE-2005-3337?

Mantis Bug Tracker is affected by multiple cross-site scripting vulnerabilities that enable remote attackers to execute arbitrary web scripts or HTML. These vulnerabilities originate from unknown vectors related to Javascript and the specific script located at mantis/view_all_set.php. Attackers who successfully exploit these vulnerabilities could manipulate user interactions and hijack sessions, compromising the security of the application.

References

http://bugs.mantisbt.org/changelog_page.php

x_refsource_CONFIRM

http://sourceforge.net/project/shownotes.php?release_id=3...

x_refsource_CONFIRM

http://www.osvdb.org/20321

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 27, 2005
Vulnerability Reserved
Oct 27, 2005

CVE-2005-3337 Data

JSON