CVE-2014-9269 in MantisBT信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web script or HTML via the project cookie.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-12-04

披露

2015-01-09

管理

已接受

条目

VDB-73539

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

2.6 (NVD)

EPSS

0.01985

KEV

否

活动

非常低

部门

Hostingprovider, Telecommunication, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-9269
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-9269
CVE Details	https://www.cvedetails.com/cve/CVE-2014-9269/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!