MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-30553)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in MantisBT versions 1.2.13 through 1.2.20 excluding version 1.2.20. A...

CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

Cross site scripting

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

CVE-2015-2046

Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...

CVE-2015-2046

CVE-2015-2046 affects MantisBT 1.2.13 and later up to, but excluding, 1.2.20. The vulnerability is a cross-site scripting (XSS) flaw in the web UI (notably affecting the adm_config_report.php flow) that can allow injection of arbitrary JavaScript. Root cause is inadequate input/output sanitizatio...

MySQL/MariaDB MantisBT Task File Read Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability in MantisBT on MySQL/MariaDB allows remote attackers to exploit the vulnerability by submitting a special request to access files on the MantisBT server...

MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-28224)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in MantisBT versions prior to 1.2.19 and prior to 1.3.0-beta.2. A remote...

Cross site scripting

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

CVE-2014-9701

CVE-2014-9701 affects MantisBT before 1.2.19 and in 1.3.x before 1.3.0-beta.2. The vulnerability is an XSS via the url parameter to permalink_page.php, enabling an attacker to inject arbitrary script/HTML. Affected components are the permalink_page handling in MantisBT; root cause is insufficient...

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

MantisBT 1.x, 2.x Arbitrary File Read Vulnerability

MantisBT is prone to an arbitrary file read vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Design/Logic Flaw

If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'admin' directory as recommended in the "Post-installation and upgrade tasks" section of the MantisBT Admin Guide, and the MySQL client has a localinfile setting enabled in php.ini...

CVE-2017-12419

If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'admin' directory as recommended in the "Post-installation and upgrade tasks" section of the MantisBT Admin Guide, and the MySQL client has a localinfile setting enabled in php.ini...

CVE-2017-12419

If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'admin' directory as recommended in the "Post-installation and upgrade tasks" section of the MantisBT Admin Guide, and the MySQL client has a localinfile setting enabled in php.ini...

CVE-2017-12419

CVE-2017-12419 affects MantisBT up to version 2.5.2 installed on MySQL/MariaDB. If the admin leaves the admin directory in place and the MySQL client has local_infile enabled (via php.ini mysqli.allow_local_infile or client config), an attacker can leverage MySQL facial connect-file-read to remot...

MantisBT < 1.3.12, 2.x < 2.5.2 Multiple XSS Vulnerabilities - Linux

MantisBT is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

MantisBT < 1.3.12, 2.x < 2.5.2 Multiple XSS Vulnerabilities - Windows

MantisBT is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...