1166 matches found
CVE-2010-3070
Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...
MantisBT Cross-site scripting Vulnerability
This host is running MantisBT and is prone to Cross-site scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbmantisxssvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MantisBT Cross-site scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
MantisBT < 1.2.2 Multiple Vulnerabilities
MantisBT is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
MantisBT < 1.2.3 Multiple HTML Injection Vulnerabilities
MantisBT is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and a...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
Cross site scripting
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802
CVE-2010-2802 affects MantisBT prior to version 1.2.2, with a cross-site scripting (XSS) vulnerability via an HTML document named with a .gif extension in inline attachments. The issue requires authenticated remote access and can inject arbitrary script/HTML. No explicit exploitation details, aff...
Cross site scripting
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
CVE-2010-2574
CVE-2010-2574 is a cross-site scripting (XSS) vulnerability in MantisBT, affecting the Add Category action in manage_proj_cat_add.php (authenticated admin context). Exploitation involves injecting script/HTML via the name parameter. Public advisories/OSS/GHSA entries confirm the XSS issue, with F...
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability
====================================================================== Secunia Research 05/08/2010 - MantisBT "Add Category" Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
MantisBT <= 1.2.2 'manage_proj_cat_add.php' HTML Injection Vulnerability
MantisBT is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
MantisBT <= 1.2.1 Attachment HTML Injection Vulnerability
MantisBT is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
MantisBT Detection (HTTP)
HTTP based detection of MantisBT. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100061";...
Gentoo Security Advisory GLSA 200812-07 (mantisbt)
The remote host is missing updates announced in advisory GLSA 200812-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200809-10 (mantisbt)
The remote host is missing updates announced in advisory GLSA 200809-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200512-12 (Mantis)
The remote host is missing updates announced in advisory GLSA 200512-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...