LWN.net Logo

mantis: cross-site scripting

Package(s):mantis CVE #(s):CVE-2007-6611
Created:January 7, 2008 Updated:March 4, 2008
Description:

From the CVE entry:

Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename.

Alerts:
Fedora FEDORA-2008-0282 2008-01-07
Fedora FEDORA-2008-0353 2008-01-07
Debian DSA-1467-1 2008-01-19
Gentoo 200803-04 2008-03-03

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.