CVE:CVE-2008-0404
CNNVD:CNNVD-200801-353
1.1.1以前的Mantis中存在跨站脚本攻击漏洞。远程攻击者可以通过与"最活跃的程序缺陷(Most active bugs)"汇总有关的向量，注入任意Web脚本或HTML。
solution:Upgrade mantis mantis to a higher version than 1.1.0,0.9,0.9.1,0.10,0.10.1,0.10.2,0.11,0.11.1,0.12,0.13,0.13.1,0.14,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.14.6,0.14.7,0.14.8,0.15,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.15.6,0.15.7,0.15.8,0.15.9,0.15.10,0.15.11,0.15.12,0.16,0.16.0,0.16.1,0.17,0.17.0,0.17.1,0.17.2,0.17.3,0.17.4,0.17.4a,0.17.5,0.18,0.18.0,0.18.0_rc1,0.18.0a2,0.18.0a3,0.18.0a4,0.18.2,0.18.3,0.18a1,0.19.0,0.19.0_rc1,0.19.0a,0.19.0a1,0.19.0a2,0.19.1,0.19.2,0.19.3,0.19.4,1.0,1.0.0_rc1,1.0.0_rc2,1.0.0_rc3,1.0.0_rc4,1.0.0a1,1.0.0a2,1.0.0a3,1.0.1,1.1,1.1.0a1,and avoid the version (,1.1.0],0.9,0.9.1,0.10,0.10.1,0.10.2,0.11,0.11.1,0.12,0.13,0.13.1,0.14,0.14.1,0.14.2,0.14.3,0.14.4,0.14.5,0.14.6,0.14.7,0.14.8,0.15,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.15.6,0.15.7,0.15.8,0.15.9,0.15.10,0.15.11,0.15.12,0.16,0.16.0,0.16.1,0.17,0.17.0,0.17.1,0.17.2,0.17.3,0.17.4,0.17.4a,0.17.5,0.18,0.18.0,0.18.0_rc1,0.18.0a2,0.18.0a3,0.18.0a4,0.18.2,0.18.3,0.18a1,0.19.0,0.19.0_rc1,0.19.0a,0.19.0a1,0.19.0a2,0.19.1,0.19.2,0.19.3,0.19.4,1.0,1.0.0_rc1,1.0.0_rc2,1.0.0_rc3,1.0.0_rc4,1.0.0a1,1.0.0a2,1.0.0a3,1.0.1,1.1,1.1.0a1
solution:Upgrade mamboxchange laithai to a higher version than 4.5.5,and avoid the version 4.5.5