Debian Security Advisory DSA 1133-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 1133-1. Several remote vulnerabilities have been discovered in the Mantis bug tracking system, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the followi...

Debian: Security Advisory (DSA-1133-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1133-1 : mantis - missing input sanitising

Several remote vulnerabilities have been discovered in the Mantis bug tracking system, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0664 A cross-site scripting vulnerability was discovered ...

CVE-2006-1577

Multiple cross-site scripting XSS vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 startday, 2 startyear, and 3 startmonth parameters...

CVE-2006-1577

Multiple cross-site scripting XSS vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 startday, 2 startyear, and 3 startmonth parameters...

CVE-2006-1577

Multiple cross-site scripting XSS vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 startday, 2 startyear, and 3 startmonth parameters...

CVE-2006-1577

CVE-2006-1577 affects Mantis before or up to 1.0.1 (1.0.1, 1.0.0rc5 and earlier) with multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by supplying one of three parameters: start_day, start_ye...