CVE-2008-3331: XSS
Published Jul 27, 2008
·Updated
Cross-site scripting (XSS) vulnerability in returndynamicfilters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filtertarget parameter.
Affected Software
95 affected components
Mantis Mantis<=1.1.1
Mantis Mantis=0.9
Mantis Mantis=0.9.0
Mantis Mantis=0.9.1
Mantis Mantis=0.10
Mantis Mantis=0.10.0
Mantis Mantis=0.10.1
Mantis Mantis=0.10.2
Mantis Mantis=0.11
Mantis Mantis=0.11.0
Mantis Mantis=0.11.1
Mantis Mantis=0.12
Mantis Mantis=0.12.0
Mantis Mantis=0.13
Mantis Mantis=0.13.0
Mantis Mantis=0.13.1
Mantis Mantis=0.14
Mantis Mantis=0.14.0
Mantis Mantis=0.14.1
Mantis Mantis=0.14.2
Mantis Mantis=0.14.3
Mantis Mantis=0.14.4
Mantis Mantis=0.14.5
Mantis Mantis=0.14.6
Mantis Mantis=0.14.7
Mantis Mantis=0.14.8
Mantis Mantis=0.15
Mantis Mantis=0.15.0
Mantis Mantis=0.15.1
Mantis Mantis=0.15.2
Mantis Mantis=0.15.3
Mantis Mantis=0.15.4
Mantis Mantis=0.15.5
Mantis Mantis=0.15.6
Mantis Mantis=0.15.7
Mantis Mantis=0.15.8
Mantis Mantis=0.15.9
Mantis Mantis=0.15.10
Mantis Mantis=0.15.11
Mantis Mantis=0.15.12
Mantis Mantis=0.16
Mantis Mantis=0.16.0
Mantis Mantis=0.16.1
Mantis Mantis=0.17
Mantis Mantis=0.17.0
Mantis Mantis=0.17.1
Mantis Mantis=0.17.2
Mantis Mantis=0.17.3
Mantis Mantis=0.17.4
Mantis Mantis=0.17.4a
Mantis Mantis=0.17.5
Mantis Mantis=0.18
Mantis Mantis=0.18.0
Mantis Mantis=0.18.0_rc1
Mantis Mantis=0.18.0a1
Mantis Mantis=0.18.0a2
Mantis Mantis=0.18.0a3
Mantis Mantis=0.18.0a4
Mantis Mantis=0.18.1
Mantis Mantis=0.18.2
Mantis Mantis=0.18.3
Mantis Mantis=0.18a1
Mantis Mantis=0.19
Mantis Mantis=0.19.0
Mantis Mantis=0.19.0_rc1
Mantis Mantis=0.19.0a
Mantis Mantis=0.19.0a1
Mantis Mantis=0.19.0a2
Mantis Mantis=0.19.1
Mantis Mantis=0.19.2
Mantis Mantis=0.19.3
Mantis Mantis=0.19.4
Mantis Mantis=1.0
Mantis Mantis=1.0.0
Mantis Mantis=1.0.0_rc1
Mantis Mantis=1.0.0_rc2
Mantis Mantis=1.0.0_rc3
Mantis Mantis=1.0.0_rc4
Mantis Mantis=1.0.0_rc5
Mantis Mantis=1.0.0a1
Mantis Mantis=1.0.0a2
Mantis Mantis=1.0.0a3
Mantis Mantis=1.0.0rc1
Mantis Mantis=1.0.0rc2
Mantis Mantis=1.0.0rc3
Mantis Mantis=1.0.0rc4
Mantis Mantis=1.0.1
Mantis Mantis=1.0.2
Mantis Mantis=1.0.3
Mantis Mantis=1.0.4
Mantis Mantis=1.0.5
Mantis Mantis=1.0.6
Mantis Mantis=1.1
Mantis Mantis=1.1.0
Mantis Mantis=1.1.0a1
Event History
Jul 27, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3331?
CVE-2008-3331 has a medium severity rating due to its potential to allow cross-site scripting attacks.
2
How do I fix CVE-2008-3331?
To fix CVE-2008-3331, upgrade Mantis to version 1.1.2 or later.
3
What types of software are affected by CVE-2008-3331?
CVE-2008-3331 affects multiple versions of Mantis before 1.1.2, including 0.9 and all versions up to 1.1.1.
4
Can CVE-2008-3331 be exploited remotely?
Yes, CVE-2008-3331 can be exploited remotely by attackers through crafted web requests.
5
What is the impact of CVE-2008-3331 on web applications?
CVE-2008-3331 can lead to the injection of arbitrary web scripts or HTML in affected web applications.