CVE-2006-1577 - CVE House
Back to Database
Status published Medium CVE-2006-1577

Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1,...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-1577

Credits & Attribution

No credits recorded in the NVD database.

References

More from mantis

View All →
CVE-2013-1811
An access control issue in MantisBT before 1.2.13 allows users...
Medium 4.3
CVE-2008-4689
Mantis before 1.1.3 does not unset the session cookie during...
High 7.5
CVE-2008-4688
core/string_api.php in Mantis before 1.1.3 does not check the privileges...
Medium 5
CVE-2008-4687
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to...
Critical 9
CVE-2008-3333
Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows...
High 7.5

Affected Vendor

Affected Software

mantis
Vulnerable Versions:
1.0, 1.0.0_rc1, 1.0.0_rc2, 1.0.0_rc3, 1.0.0_rc4, 1.0.0a1, 1.0.0a2, 1.0.0a3, 1.0.1

Timeline

Official Publish: April 2nd, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.