EUVD-2006-0672

Malware in sbrugna...

Debian DSA-1133-1 : mantis - missing input sanitising

Several remote vulnerabilities have been discovered in the Mantis bug tracking system, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0664 A cross-site scripting vulnerability was discovered ...

CVE-2006-0665

Unspecified vulnerability in 1 querystore.php and 2 manageprojcreate.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, bu...

CVE-2006-0665

CVE-2006-0665 affects Mantis before 1.0.0, with cross-site scripting vulnerabilities in query_store.php and manage_proj_create.php. OpenVAS and Debian DSA entries confirm remote, web-script execution risks from these XSS flaws due to insufficient input handling, leading to arbitrary web-script ex...