Unrated severityNVD Advisory· Published Apr 2, 2006· Updated Jun 16, 2026
CVE-2006-1577
CVE-2006-1577
Description
Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mantis:mantis:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0_rc3:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.0_rc4:*:*:*:*:*:*:*
- cpe:2.3:a:mantis:mantis:1.0.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.0.1
Patches
Vulnerability mechanics
References
8- www.securityfocus.com/bid/17326nvdExploit
- secunia.com/advisories/19471nvdVendor Advisory
- pridels0.blogspot.com/2006/03/mantis-xss-vuln.htmlnvd
- secunia.com/advisories/21400nvd
- www.debian.org/security/2006/dsa-1133nvd
- www.osvdb.org/24292nvd
- www.vupen.com/english/advisories/2006/1184nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25579nvd
News mentions
0No linked articles in our index yet.