CVE

Id
46347  
CVE No.
CVE-2010-3763  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505258 46347 CVE-2010-3763 MLIST:[oss-security] 20100914 CVE request: mantis before 1.2.3 (XSS)  View
505259 46347 CVE-2010-3763 URL:http://www.openwall.com/lists/oss-security/2010/09/14/12  View
505260 46347 CVE-2010-3763 MLIST:[oss-security] 20100914 Re: CVE request: mantis before 1.2.3 (XSS)  View
505261 46347 CVE-2010-3763 URL:http://www.openwall.com/lists/oss-security/2010/09/14/13  View
505262 46347 CVE-2010-3763 CONFIRM:http://www.mantisbt.org/bugs/changelog_page.php?version_id=111  View
505263 46347 CVE-2010-3763 CONFIRM:http://www.mantisbt.org/bugs/view.php?id=12309  View
505264 46347 CVE-2010-3763 CONFIRM:http://www.mantisbt.org/blog/?p=123  View
505265 46347 CVE-2010-3763 FEDORA:FEDORA-2010-19070  View
505266 46347 CVE-2010-3763 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html  View
505267 46347 CVE-2010-3763 FEDORA:FEDORA-2010-19078  View
505268 46347 CVE-2010-3763 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html  View
505269 46347 CVE-2010-3763 GENTOO:GLSA-201211-01  View
505270 46347 CVE-2010-3763 URL:http://security.gentoo.org/glsa/glsa-201211-01.xml  View
505271 46347 CVE-2010-3763 BID:43837  View
505272 46347 CVE-2010-3763 URL:http://www.securityfocus.com/bid/43837  View
505273 46347 CVE-2010-3763 SECUNIA:42772  View
505274 46347 CVE-2010-3763 URL:http://secunia.com/advisories/42772  View
505275 46347 CVE-2010-3763 SECUNIA:51199  View
505276 46347 CVE-2010-3763 URL:http://secunia.com/advisories/51199  View
505277 46347 CVE-2010-3763 VUPEN:ADV-2011-0002  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36796 JVNDB-2010-002576 Mozilla Firefox および SeaMonkey の NewIdArray 関数における整数オーバーフローの脆弱性 Mozilla Firefox および SeaMonkey の NewIdArray 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2010-3767 46347 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002576.html  View