Mantisbt CVE-2010-2802 Cross-Site Scripting Vulnerability

Bugtraq ID:	73822
Class:	Input Validation Error
CVE:	CVE-2010-2802
Remote:	Yes
Local:	No
Published:	Sep 07 2010 12:00AM
Updated:	Sep 07 2010 12:00AM
Credit:	Unknown
Vulnerable:	Mantisbt Mantisbt 1.1.8 Mantisbt Mantisbt 1.1.7 Mantisbt Mantisbt 1.1.5 Mantisbt Mantisbt 1.0.8 Mantisbt Mantisbt 1.0.7 Mantisbt Mantisbt 1.0.6 Mantisbt Mantisbt 1.0 RC3 Mantisbt Mantisbt 1.0 rc2 Mantisbt Mantisbt 1.0 RC1 Mantisbt Mantisbt 1.0 Mantisbt Mantisbt 0.19.5 Mantisbt Mantisbt 0.19.4 Mantisbt Mantisbt 0.19.3 Mantisbt Mantisbt 0.19.2 Mantisbt Mantisbt 0.19 Mantisbt Mantisbt 0.18 Mantisbt Mantisbt 1.2.1 Mantisbt Mantisbt 1.2.0 Mantisbt Mantisbt 1.1.6 Mantisbt Mantisbt 1.1.4 Mantisbt Mantisbt 1.1.2 Mantisbt Mantisbt 1.1.1 Mantisbt Mantisbt 1.1.0 Mantisbt Mantisbt 1.0.5 Mantisbt Mantisbt 1.0.4 Mantisbt Mantisbt 1.0.3 Mantisbt Mantisbt 1.0.2 Mantisbt Mantisbt 1.0.1 Mantisbt Mantisbt 1.0.0A3 Mantisbt Mantisbt 1.0.0A2 Mantisbt Mantisbt 1.0.0A1 Mantisbt Mantisbt 1.0.0 RC5 Mantisbt Mantisbt 1.0.0 Rc4 Mantisbt Mantisbt 0.19.1 Mantisbt Mantisbt 0.19.0A2 Mantisbt Mantisbt 0.19.0A1 Mantisbt Mantisbt 0.19.0 Rc1
Not Vulnerable:

Mantisbt CVE-2010-2802 Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Mantisbt CVE-2010-2802 Cross-Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Mantisbt CVE-2010-2802 Cross-Site Scripting Vulnerability

References:

• http://www.mantisbt.org/bugs/view.php?id=11952 (MISC)
  
• http://www.openwall.com/lists/oss-security/2010/08/02/16 (MISC)
  
• http://www.openwall.com/lists/oss-security/2010/08/03/7 (MISC)
  
• https://bugzilla.redhat.com/show_bug.cgi?id=620992 (MISC)
  
• MantisBT 1.2.2 Released (Mantis)