1532 matches found
CVE-2010-3070
Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...
CVE-2010-3070
CVE-2010-3070 affects MantisBT that bundles NuSOAP 0.9.5, enabling a remote XSS via PATH_INFO to PHP scripts using NuSOAP classes. The vulnerability arises from NuSOAP in MantisBT not sanitizing user input passed to nusoap.php, allowing injection of arbitrary HTML/script. Public references and Op...
CVE-2010-3070: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...
MantisBT Cross-site scripting Vulnerability
This host is running MantisBT and is prone to Cross-site scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbmantisxssvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MantisBT Cross-site scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
MantisBT < 1.2.3 Multiple HTML Injection Vulnerabilities
MantisBT is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and a...
MantisBT < 1.2.2 Multiple Vulnerabilities
MantisBT is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
Cross site scripting
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802
CVE-2010-2802 affects MantisBT prior to version 1.2.2, with a cross-site scripting (XSS) vulnerability via an HTML document named with a .gif extension in inline attachments. The issue requires authenticated remote access and can inject arbitrary script/HTML. No explicit exploitation details, aff...
CVE-2010-2802
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2802: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments...
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
Cross site scripting
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
CVE-2010-2574
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
CVE-2010-2574
CVE-2010-2574 is a cross-site scripting (XSS) vulnerability in MantisBT, affecting the Add Category action in manage_proj_cat_add.php (authenticated admin context). Exploitation involves injecting script/HTML via the name parameter. Public advisories/OSS/GHSA entries confirm the XSS issue, with F...
CVE-2010-2574: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in manageprojcatadd.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action...
Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability
====================================================================== Secunia Research 05/08/2010 - MantisBT "Add Category" Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...