CVE-2016-5364 in MantisBT信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19 and earlier allows remote attackers to inject arbitrary web script or HTML via the return parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2016-06-09

披露

2017-02-17

管理

已接受

条目

VDB-97099

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

6.1 (NVD)

EPSS

0.01865

KEV

否

活动

非常低

部门

Insurance, Pharma, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-5364
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-5364
CVE Details	https://www.cvedetails.com/cve/CVE-2016-5364/

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!