Debian Security Advisory DSA 944-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 944-1. Several security related problems have been discovered in Mantis, a web-based bug tracking system. For details on the issues resolved, please visit the referenced advisories. The old stable distribution woody does no...

[SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 944-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4522

CVE-2005-4522 describes cross-site scripting (XSS) in Mantis before or at 1.0.0rc3, in the view_filters_page.php filters script. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via the (1) view_type and (2) target_field parameters. The CVSSv2 base score is 4.3 (Mediu...