CVE:CVE-2005-4238
CNNVD:CNNVD-200512-259
Mantis 1.0.0rc3及更早版本中的view_filters_page.php存在跨站脚本攻击漏洞，远程攻击者可以通过target_field参数注入任意Web脚本或HTML。
solution:Upgrade mantis mantis to a higher version than 0.9,0.9.1,0.10,0.10.1,0.10.2,0.11,0.11.1,0.12,0.13,0.13.1,0.14,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.14.6,0.14.7,0.14.8,0.15,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.15.6,0.15.7,0.15.8,0.15.9,0.15.10,0.15.11,0.15.12,0.16,0.16.0,0.16.1,0.17,0.17.0,0.17.1,0.17.2,0.17.3,0.17.4,0.17.4a,0.17.5,0.18,0.18.0_rc1,0.18.0a2,0.18.0a3,0.18.0a4,0.18.2,0.18.3,0.18a1,0.19.0,0.19.0_rc1,0.19.0a,0.19.0a1,0.19.0a2,0.19.1,0.19.2,0.19.3,1.0.0_rc1,1.0.0_rc2,1.0.0_rc3,1.0.0a1,1.0.0a2,1.0.0a3,and avoid the version 0.9,0.9.1,0.10,0.10.1,0.10.2,0.11,0.11.1,0.12,0.13,0.13.1,0.14,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.14.6,0.14.7,0.14.8,0.15,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.15.6,0.15.7,0.15.8,0.15.9,0.15.10,0.15.11,0.15.12,0.16,0.16.0,0.16.1,0.17,0.17.0,0.17.1,0.17.2,0.17.3,0.17.4,0.17.4a,0.17.5,0.18,0.18.0_rc1,0.18.0a2,0.18.0a3,0.18.0a4,0.18.2,0.18.3,0.18a1,0.19.0,0.19.0_rc1,0.19.0a,0.19.0a1,0.19.0a2,0.19.1,0.19.2,0.19.3,1.0.0_rc1,1.0.0_rc2,1.0.0_rc3,1.0.0a1,1.0.0a2,1.0.0a3