CVE-2013-1934

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value.

• CWE-79

• http://www.debian.org/security/2015/dsa-3120Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/09/1Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1934Issue Tracking, Patch, Third Party Advisory
• https://mantisbt.org/bugs/view.php?id=15416Issue Tracking, Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-1934Third Party Advisory
• http://www.debian.org/security/2015/dsa-3120Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/09/1Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1934Issue Tracking, Patch, Third Party Advisory
• https://mantisbt.org/bugs/view.php?id=15416Issue Tracking, Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-1934Third Party Advisory

Published

Oct 31, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1928The do_video_set_spu_palette function in fs/compat_ioctl.c i…
• CVE-2013-1929Heap-based buffer overflow in the tg3_read_vpd function in d…
• CVE-2013-1930MantisBT 1.2.12 before 1.2.15 allows authenticated users to …4.3
• CVE-2013-1931A cross-site scripting (XSS) vulnerability in MantisBT 1.2.1…6.1
• CVE-2013-1932A cross-site scripting (XSS) vulnerability in the configurat…5.4
• CVE-2013-1933The extract_from_ocr function in lib/docsplit/text_extractor…
• CVE-2013-1935A certain Red Hat patch to the KVM subsystem in the kernel p…
• CVE-2013-1936Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-1937Multiple cross-site scripting (XSS) vulnerabilities in tbl_g…
• CVE-2013-1938Zimbra 2013 has XSS in aspell.php6.1
• CVE-2013-1939The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x befo…
• CVE-2013-1940X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does no…