VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 28, 2005· Updated Jun 16, 2026

CVE-2005-3090

CVE-2005-3090

Description

Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used to delete the bug, as identified by bug#0006002, a different vulnerability than CVE-2005-2557.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Mantisbt/Mantis10 versions
    cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*
    • cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*
    • (no CPE)range: 0.19.0a1 - 1.0.0a3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.