CVE-2005-3091
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/09/2005
Last modified:
05/09/2008
Description
Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:mantis:mantis:0.9.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.10.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.11.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.12.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.13.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.14.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page