Cross-Site Scripting Vulnerabilities in Mantis by MantisBT
CVE-2005-4522

Currently unrated

Key Information:

Vendor: Mantis
Status: Mantis
Vendor: CVE Published:; 28 December 2005

What is CVE-2005-4522?

Multiple cross-site scripting (XSS) vulnerabilities exist in the view_filters_page.php script of Mantis, allowing remote attackers to inject arbitrary web scripts or HTML content. This occurs via the view_type and target_field parameters, which can be exploited to execute malicious scripts in the context of the user's session. It is crucial for users of Mantis to apply the latest updates and patches to mitigate these security risks.

References

http://www.osvdb.org/22053

vdb-entryx_refsource_OSVDB

http://secunia.com/advisories/18481

third-party-advisoryx_refsource_SECUNIA

http://sourceforge.net/project/shownotes.php?release_id=3...

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 28, 2005
Vulnerability Reserved
Dec 28, 2005

CVE-2005-4522 Data

JSON