This host is running MantisBT and is prone to Cross-site scripting Vulnerability.

Successful exploitation will allow attackers to conduct cross-site scripting attacks. Impact Level: Application.

Upgrade to MantisBT version 1.2.2 or later For updates refer to http://www.mantisbt.org/download.php

The application allows remote authenticated users to inject arbitrary web script or HTML via an HTML document with a '.gif' filename extension, related to inline attachments.

MantisBT version prior to 1.2.2

• http://www.mantisbt.org/blog/?p=113
• http://www.openwall.com/lists/oss-security/2010/08/02/16
• http://www.openwall.com/lists/oss-security/2010/08/03/7

---

Updated on 2015-03-25