CVE-2010-2802

Published: Sep 7, 2010Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in MantisBT before 1.2.2 allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a .gif filename extension, related to inline attachments.

Affected (37)

Products: Mantisbt: Mantisbt

Mantisbt

1 product

Mantisbt

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Mantisbt Mantisbt	Up to 1.2.1
Mantisbt Mantisbt	Version 0.18.0
Mantisbt Mantisbt	Version 0.19.0
Mantisbt Mantisbt	Version 0.19.0 rc1
Mantisbt Mantisbt	Version 0.19.0a1
Mantisbt Mantisbt	Version 0.19.0a2
Mantisbt Mantisbt	Version 0.19.1
Mantisbt Mantisbt	Version 0.19.2
Mantisbt Mantisbt	Version 0.19.3
Mantisbt Mantisbt	Version 0.19.4
Mantisbt Mantisbt	Version 0.19.5
Mantisbt Mantisbt	Version 1.0.0
Mantisbt Mantisbt	Version 1.0.0 rc1
Mantisbt Mantisbt	Version 1.0.0 rc2
Mantisbt Mantisbt	Version 1.0.0 rc3
Mantisbt Mantisbt	Version 1.0.0 rc4
Mantisbt Mantisbt	Version 1.0.0 rc5
Mantisbt Mantisbt	Version 1.0.0a1
Mantisbt Mantisbt	Version 1.0.0a2
Mantisbt Mantisbt	Version 1.0.0a3
Mantisbt Mantisbt	Version 1.0.1
Mantisbt Mantisbt	Version 1.0.2
Mantisbt Mantisbt	Version 1.0.3
Mantisbt Mantisbt	Version 1.0.4
Mantisbt Mantisbt	Version 1.0.5
Mantisbt Mantisbt	Version 1.0.6
Mantisbt Mantisbt	Version 1.0.7
Mantisbt Mantisbt	Version 1.0.8
Mantisbt Mantisbt	Version 1.1.0
Mantisbt Mantisbt	Version 1.1.1
Mantisbt Mantisbt	Version 1.1.2
Mantisbt Mantisbt	Version 1.1.4
Mantisbt Mantisbt	Version 1.1.5
Mantisbt Mantisbt	Version 1.1.6
Mantisbt Mantisbt	Version 1.1.7
Mantisbt Mantisbt	Version 1.1.8
Mantisbt Mantisbt	Version 1.2.0