5.4 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
74.9%
Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php.
CPE | Name | Operator | Version |
---|---|---|---|
mantis:mantis | mantis | le | 1.1.0a1 |
osvdb.org/39873
secunia.com/advisories/28185
secunia.com/advisories/28352
secunia.com/advisories/28551
secunia.com/advisories/29198
security.gentoo.org/glsa/glsa-200803-04.xml
sourceforge.net/project/shownotes.php?release_id=562940
www.debian.org/security/2008/dsa-1467
www.mantisbt.org/bugs/view.php?id=8679
www.securityfocus.com/bid/27045
bugzilla.redhat.com/show_bug.cgi?id=427277
www.redhat.com/archives/fedora-package-announce/2008-January/msg00227.html
www.redhat.com/archives/fedora-package-announce/2008-January/msg00309.html