CVE-2008-2276

Related Files

Gentoo Linux Security Advisory 200809-10

Posted Sep 22, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200809-10 - Multiple vulnerabilities have been reported in Mantis. Antonio Parata and Francesco Ongaro reported a Cross-Site Request Forgery vulnerability in manage_user_create.php (CVE-2008-2276), a Cross-Site Scripting vulnerability in return_dynamic_filters.php (CVE-2008-3331), and an insufficient input validation in adm_config_set.php (CVE-2008-3332). A directory traversal vulnerability in core/lang_api.php (CVE-2008-3333) has also been reported. Versions less than 1.1.2 are affected.

tags | advisory, php, vulnerability, xss, csrf

systems | linux, gentoo

advisories | CVE-2008-2276, CVE-2008-3331, CVE-2008-3332, CVE-2008-3333

SHA-256 | eafe452544fafec966e8519b25d1673da524d85f9967628e4b68d7a056195f74

Download | Favorite | View