CVE-2006-1577: XSS
Multiple cross-site scripting (XSS) vulnerabilities in viewallset.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) startday, (2) startyear, and (3) startmonth parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1577?
CVE-2006-1577 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2006-1577?
To fix CVE-2006-1577, upgrade MantisBT to version 1.0.2 or later, which addresses these cross-site scripting vulnerabilities.
What versions of MantisBT are affected by CVE-2006-1577?
CVE-2006-1577 affects MantisBT versions 1.0.1, all release candidates up to 1.0.0rc5, and earlier versions.
What are the attack vectors for CVE-2006-1577?
The attack vectors for CVE-2006-1577 involve injecting arbitrary web script or HTML through the start_day, start_month, and start_year parameters.
Can CVE-2006-1577 be exploited without authentication?
Yes, CVE-2006-1577 can be exploited by remote attackers without requiring authentication.