CVE-2005-2557: XSS
Published Sep 28, 2005
·Updated
Cross-site scripting (XSS) vulnerability in viewallset.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090.
Affected Software
23 affected components
Mantis Mantis=0.19.0a1
Mantis Mantis=0.19.0a2
Mantis Mantis=1.0.0a3
Mantis Mantis=1.0.0a1
Mantis Mantis=0.19.0_rc1
Mantis Mantis=1.0.0a2
Mantis Mantis=0.19.0
Mantis Mantis=0.19.1
Mantis Mantis=0.19.2
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Gentoo Linux
Debian Debian Linux=3.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Sep 28, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2557?
CVE-2005-2557 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2005-2557?
To fix CVE-2005-2557, you should upgrade MantisBT to a version that is not vulnerable, such as 1.0.0 or later.
3
Which versions of Mantis is affected by CVE-2005-2557?
CVE-2005-2557 affects Mantis versions 0.19.0a1 through 1.0.0a3.
4
Can CVE-2005-2557 be exploited remotely?
Yes, CVE-2005-2557 can be exploited remotely by an attacker through crafted URLs.
5
What type of vulnerability is CVE-2005-2557?
CVE-2005-2557 is a cross-site scripting (XSS) vulnerability.