CVE-2007-6611 Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php.
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bug_report.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mantis | <= 1.1.0a1 | No fix listed |
References
- 39873 vdb-entry
- 28185 third-party-advisory vendor-advisory
- 28352 third-party-advisory vendor-advisory
- 28551 third-party-advisory vendor-advisory
- 29198 third-party-advisory
- GLSA-200803-04 vendor-advisory
- sourceforge.net
- DSA-1467 vendor-advisory
- www.mantisbt.org
- 27045 patch vdb-entry
- bugzilla.redhat.com
- FEDORA-2008-0282 vendor-advisory
- FEDORA-2008-0353 vendor-advisory