CVE-2010-2802

Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...

CVE-2010-2802

CVE-2010-2802 affects MantisBT prior to version 1.2.2, with a cross-site scripting (XSS) vulnerability via an HTML document named with a .gif extension in inline attachments. The issue requires authenticated remote access and can inject arbitrary script/HTML. No explicit exploitation details, aff...