Cross-Site Scripting Vulnerability in Mantis Bug Tracker by MantisBT
CVE-2008-0404

Currently unrated

Key Information:

Vendor: Mantis
Status: Mantis
Vendor: CVE Published:; 23 January 2008

What is CVE-2008-0404?

A cross-site scripting (XSS) vulnerability exists in Mantis Bug Tracker prior to version 1.1.1, allowing remote attackers to inject arbitrary web scripts or HTML. This vulnerability is associated with vectors related to the 'Most active bugs' summary, which can be exploited to execute malicious scripts in the context of the user's session. Affected users may unknowingly perform actions or reveal sensitive information, posing a significant security risk to users and the integrity of the application.

References

http://sourceforge.net/project/shownotes.php?release_id=5...

x_refsource_CONFIRM

http://secunia.com/advisories/28591

third-party-advisoryx_refsource_SECUNIA

http://secunia.com/advisories/28577

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 23, 2008
Vulnerability Reserved
Jan 22, 2008

CVE-2008-0404 Data

JSON