ID de Prueba:	1.3.6.1.4.1.25623.1.0.103214
Categoría:	Web application abuses
Título:	MantisBT <= 1.2.6 XSS and SQLi Vulnerabilities
Resumen:	MantisBT is prone to an SQL injection (SQLi) and a cross-site; scripting (XSS) vulnerability.
Descripción:	Summary: MantisBT is prone to an SQL injection (SQLi) and a cross-site scripting (XSS) vulnerability. Vulnerability Impact: Exploiting these issues could allow an attacker to steal cookie- based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: MantisBT 1.2.6 is vulnerable, other versions may also be affected. Solution: Update to the latest version. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2938 BugTraq ID: 49235 http://www.securityfocus.com/bid/49235 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html http://security.gentoo.org/glsa/glsa-201211-01.xml http://packetstormsecurity.org/files/104149 http://www.openwall.com/lists/oss-security/2011/08/18/7 http://www.openwall.com/lists/oss-security/2011/08/19/16 http://secunia.com/advisories/51199 http://securityreason.com/securityalert/8391
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.