View Issue Details

IDProjectCategoryView StatusLast Update
0008181mantisbtsecuritypublic2008-05-08 22:06
Reportergrangeway Assigned Tograngeway  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Fixed in Version1.1.0a4 
Summary0008181: Display of database error message could be used to generate Cross site scripting issue
Description

In some cases, it may be possible for a database error message to be used to generate a cross site scripting issue.

TagsNo tags attached.

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: master bf9f4f1e

2007-07-22 17:02

Paul Richards


Details Diff
Fix 0008181: Display of database error message could be used to generate Cross site scripting issue

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@4467 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9
Affected Issues
0008181
mod - core/database_api.php Diff File