PT-2006-1888 · Mantisbt · Mantis
Publicado
2006-02-22
·
Atualizado
2018-10-18
·
CVE-2006-0841
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mantis versions 1.00rc4 and earlier
Description
The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different PHP files, including
hide status, handler id, user monitor, reporter id, view type, show severity, show category, show status, show resolution, show build, show profile, show priority, highlight changed, relationship type, and relationship bug in view all set.php, the sort parameter in manage user page.php, the view type parameter in view filters page.php, and the title parameter in proj doc delete.php.Recommendations
For Mantis versions 1.00rc4 and earlier, consider disabling the parameters
hide status, handler id, user monitor, reporter id, view type, show severity, show category, show status, show resolution, show build, show profile, show priority, highlight changed, relationship type, and relationship bug in view all set.php, the sort parameter in manage user page.php, the view type parameter in view filters page.php, and the title parameter in proj doc delete.php until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Mantis