CVE-2005-4522: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the viewfilterspage.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) viewtype and (2) targetfield parameters.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4522?
CVE-2005-4522 is considered a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2005-4522?
To mitigate CVE-2005-4522, upgrade Mantis to version 1.0.0a4 or later where the vulnerabilities have been addressed.
Which versions of Mantis are affected by CVE-2005-4522?
CVE-2005-4522 affects Mantis versions 1.0.0rc3 and earlier, including versions 1.0.0rc1, 1.0.0rc2, and all 1.0.0a versions.
What type of attacks can be executed due to CVE-2005-4522?
CVE-2005-4522 allows attackers to perform cross-site scripting attacks, potentially enabling them to inject arbitrary web scripts or HTML into user browsers.
Is CVE-2005-4522 easily exploitable?
Yes, CVE-2005-4522 can be easily exploited by remote attackers through crafted parameters in the affected PHP scripts.