CVE-2006-0664: XSS
Cross-site scripting (XSS) vulnerability in configdefaultsinc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0664?
CVE-2006-0664 is considered to have a medium severity level due to its cross-site scripting capabilities.
How do I fix CVE-2006-0664?
To fix CVE-2006-0664, upgrade to a version of Mantis that is newer than 1.0, which contains patches for this vulnerability.
What systems are affected by CVE-2006-0664?
CVE-2006-0664 affects multiple versions of Mantis, including those prior to version 1.0.
What type of vulnerability is CVE-2006-0664?
CVE-2006-0664 is a cross-site scripting (XSS) vulnerability.
Can CVE-2006-0664 be exploited remotely?
Yes, CVE-2006-0664 can be exploited remotely by attackers injecting arbitrary web script or HTML.