Vulnerability in Gentoo Linux
CVE-2005-2557
Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090.
EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.
Affected products
- Gentoo Linux
- Mantis — versions 0.19.0, 0.19.0_rc1, 0.19.0a1
- Debian Debian_linux — versions 3.1
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (vdb-entry, x_refsource_XF)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- security@debian.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- security@debian.org (x_refsource_CONFIRM)
- security@debian.org (mailing-list, x_refsource_BUGTRAQ)