CVE-2011-2938

MEDIO 4.3CVE-2011-2938 · Published 21/09/2011 · updated 16/06/2026

In breve

CVE-2011-2938 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda mantisbt (mantisbt).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.5%, superiore al 91.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mantisbt mantisbt	`= 0.19.3= 0.19.4= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.1.0= 1.1.1= 1.1.2= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5≤ 1.2.6`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in filter_api.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as demonstrated by the project_id parameter to search.php.

References

lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html · Exploit
packetstormsecurity.org/files/104149 · Exploit
secunia.com/advisories/51199
security.gentoo.org/glsa/glsa-201211-01.xml
securityreason.com/securityalert/8391
mantisbt.org/bugs/view.php · Exploit
openwall.com/lists/oss-security/2011/08/18/7 · Exploit
openwall.com/lists/oss-security/2011/08/19/16 · Exploit
securityfocus.com/bid/49235 · Exploit
bugs.gentoo.org/show_bug.cgi · Exploit
bugs.launchpad.net/ubuntu/+source/mantis/+bug/828857 · Exploit
bugzilla.redhat.com/show_bug.cgi · Exploit
mantisbt/mantisbt commit 317f3db

Altre vulnerabilità di mantisbt

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mantisbt

= 0.19.3= 0.19.4= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.1.0= 1.1.1= 1.1.2= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5≤ 1.2.6

No fix yet

Altre vulnerabilità di mantisbt

Vedi tutto →