FreeBSD : mantis -- XSS vulnerability (2b63e964-eb04-11e6-9ac1-a4badb2f4699)

wdollman reports : The value of the viewtype parameter on the viewallbugpage.php page is not encoded before being displayed on the page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

mantis -- XSS vulnerability

wdollman reports: The value of the viewtype parameter on the viewallbugpage.php page is not encoded before being displayed on the page...

CVE-2014-9089

Multiple SQL injection vulnerabilities in viewallbugpage.php in MantisBT before 1.2.18 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to viewallset.php...