Back
CVE-2005-4238
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
Published: Dec 14, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (65)
| Vendor | Product | Version |
|---|---|---|
| mantis | mantis | 0.9 |
| mantis | mantis | 0.9.1 |
| mantis | mantis | 0.10 |
| mantis | mantis | 0.10.1 |
| mantis | mantis | 0.10.2 |
| mantis | mantis | 0.11 |
| mantis | mantis | 0.11.1 |
| mantis | mantis | 0.12 |
| mantis | mantis | 0.13 |
| mantis | mantis | 0.13.1 |
| mantis | mantis | 0.14 |
| mantis | mantis | 0.14.1 |
| mantis | mantis | 0.14.2 |
| mantis | mantis | 0.14.3 |
| mantis | mantis | 0.14.4 |
| mantis | mantis | 0.14.5 |
| mantis | mantis | 0.14.6 |
| mantis | mantis | 0.14.7 |
| mantis | mantis | 0.14.8 |
| mantis | mantis | 0.15 |
…and 45 more
GitHub Security Advisory GHSA-2v58-xw52-wr5c
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier...
References (12)
- http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html
- http://secunia.com/advisories/18018
- http://secunia.com/advisories/18481
- http://www.debian.org/security/2005/dsa-944
- http://www.securityfocus.com/bid/15842 Exploit
- http://www.vupen.com/english/advisories/2005/2874
- http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html
- http://secunia.com/advisories/18018
- http://secunia.com/advisories/18481
- http://www.debian.org/security/2005/dsa-944
- http://www.securityfocus.com/bid/15842 Exploit
- http://www.vupen.com/english/advisories/2005/2874
Risk Scores
CVSS Score
4.3 / 10
EPSS Score
2.33%
Top 18% most likely to be exploited
Threat Score
17.9 / 100
Data Sources
NVD
EPSS
GitHub