• info
• discussion
• exploit
• solution
• references

Mantis 'view.php' HTML Injection Vulnerability

Solution:
The vendor released Mantis 1.1.0 to address this issue. Please see the references for more information.


Mantis Mantis 1.1.0a2

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0.0 RC5

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0rc2

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0a2

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0RC4

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0RC3

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0a1

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0a3

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0 .0rc1

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0

Mantis Mantis 1.0.1

• Mantis mantis-1.1.0.tar.gz
  http://downloads.sourceforge.net/mantisbt/mantis-1.1.0.tar.gz?modtime= 1198104416&big_mirror=0