CVE-2010-3303

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

Cross site scripting

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3303

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

CVE-2010-3763

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3763

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3303

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

CVE-2010-3763

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3303

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

CVE-2010-3763

CVE-2010-3763 is an XSS vulnerability in MantisBT’s core/summary_api.php that allows injection of arbitrary script/HTML via the Summary field in versions before 1.2.3. Impact aligns with a partial integrity exposure (I:P) per CVSS, with no confidentiality or availability impact. The issue is addr...

CVE-2010-3303

CVE-2010-3303 affects MantisBT prior to 1.2.3. Multiple XSS vulnerabilities allow a remote authenticated administrator to inject arbitrary script/HTML via (1) plugin name (manage_plugin_uninstall.php), (2) an enumeration value, (3) a String value of a custom field (core/cfdefs/cfdef_standard.php)...

PT-2010-5051

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Summary field. This can be exploited by sending malicious input to the affected API...

PT-2010-4720

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.3 Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved through various means, including: - a plugin name, - an enumeration value or a Strin...

CVE-2010-3763: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3303: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 a plugin name, related to managepluginuninstall.php; 2 an enumeration value or 3 a String value of a custom field, related to...

NuSOAP 0.9.5 'nusoap.php' XSS Vulnerability

NuSOAP is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2010-3070

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

CVE-2010-3070

CVE-2010-3070 affects MantisBT that bundles NuSOAP 0.9.5, enabling a remote XSS via PATH_INFO to PHP scripts using NuSOAP classes. The vulnerability arises from NuSOAP in MantisBT not sanitizing user input passed to nusoap.php, allowing injection of arbitrary HTML/script. Public references and Op...

CVE-2010-3070

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

CVE-2010-3070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...