CVE

Id
76287  
CVE No.
CVE-2014-8986  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the selection list in the filters in the Configuration Report page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.17 allows remote administrators to inject arbitrary web script or HTML via a crafted config option, a different vulnerability than CVE-2014-8987.  
Phase
Assigned (20141119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
703194 76287 CVE-2014-8986 MLIST:[oss-security] 20141115 RE: CVE Request: XSS vulnerability in MantisBT 1.2.13  View
703195 76287 CVE-2014-8986 URL:http://www.openwall.com/lists/oss-security/2014/11/15/1  View
703196 76287 CVE-2014-8986 MLIST:[oss-security] 20141115 RE: CVE Request: XSS vulnerability in MantisBT 1.2.13  View
703197 76287 CVE-2014-8986 URL:http://www.openwall.com/lists/oss-security/2014/11/15/2  View
703198 76287 CVE-2014-8986 MLIST:[oss-security] 20141115 Re: Re: CVE Request: XSS vulnerability in MantisBT 1.2.13  View
703199 76287 CVE-2014-8986 URL:http://www.openwall.com/lists/oss-security/2014/11/15/3  View
703200 76287 CVE-2014-8986 MLIST:[oss-security] 20141119 RE: CVE Request: XSS vulnerability in MantisBT 1.2.13  View
703201 76287 CVE-2014-8986 URL:http://www.openwall.com/lists/oss-security/2014/11/19/20  View
703202 76287 CVE-2014-8986 CONFIRM:https://github.com/mantisbt/mantisbt/commit/cabacdc291c251bfde0dc2a2c945c02cef41bf40  View
703203 76287 CVE-2014-8986 DEBIAN:DSA-3120  View
703204 76287 CVE-2014-8986 URL:http://www.debian.org/security/2015/dsa-3120  View
703205 76287 CVE-2014-8986 SECUNIA:62101  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16804 JVNDB-2014-005679 Nagios および Icinga 用 check_diskio プラグインにおける任意のファイルに書き込まれる脆弱性 Nagios および Icinga 用 check_diskio プラグインには、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2014-8994 76287 3.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005679.html  View