CVE-2005-3090

The CVE-2005-3090 entry describes an XSS vulnerability in Mantis (bug_actiongroup_page.php) affecting 0.19.0a1–1.0.0a3. An attacker can inject arbitrary script/HTML via the bug summary when view_all_bug_page.php is used to delete a bug, since the summary is not quoted. No specific exploit details...