Cross-site Scripting Vulnerability in Mantis Bug Tracker
CVE-2007-6611

Currently unrated

Key Information:

Vendor

Mantis

Status
Mantis
Vendor
CVE Published:
3 January 2008

What is CVE-2007-6611?

A cross-site scripting vulnerability exists in the view.php file of Mantis Bug Tracker versions prior to 1.1.0. This vulnerability permits remote attackers to inject arbitrary web scripts or HTML by manipulating filenames, compromising the application's security and potentially exposing sensitive user data.

References

http://osvdb.org/39873
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/29198
third-party-advisoryx_refsource_SECUNIA
http://sourceforge.net/project/shownotes.php?release_id=5...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.