View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0011240 | mantisbt | security | public | 2009-12-01 01:15 | 2010-02-22 14:34 |
Reporter | dhx | Assigned To | dhx | ||
Priority | urgent | Severity | major | Reproducibility | always |
Status | closed | Resolution | fixed | ||
Product Version | 1.2.0 | ||||
Target Version | 1.2.0 | Fixed in Version | 1.2.0 | ||
Summary | 0011240: XSS on bug_revision_view_page.php with user Real Name field | ||||
Description | Set your real name in "My Account" to something including "<script>alert(42);</script>" and then go to bug_revision_view_page.php for a bug full text revision field that you've edited previously. You'll get a Javascript alert message indicating that an XSS vulnerability exists. | ||||
Tags | No tags attached. | ||||
MantisBT: master-1.2.x 19409969 2009-12-01 01:16 Details Diff |
Fix 0011240: XSS on bug_revision_view_page.php with user Real Name field User real names aren't sanitised before display on bug_revision_view_page.php thus this leads to an XSS vulnerability. |
Affected Issues 0011240 |
|
mod - bug_revision_view_page.php | Diff File | ||
MantisBT: master 71ade607 2009-12-01 01:16 Details Diff |
Fix 0011240: XSS on bug_revision_view_page.php with user Real Name field User real names aren't sanitised before display on bug_revision_view_page.php thus this leads to an XSS vulnerability. |
Affected Issues 0011240 |
|
mod - bug_revision_view_page.php | Diff File |