CVE-2004-1730: Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary w...

Security readout for executives and security teams

CVE-2004-1730 is an older cross-site scripting issue in Mantis bugtracker. A remote attacker could inject script or HTML through several login, signup, project-selection, or issue-list parameters. Business risk depends on whether a vulnerable Mantis instance is still reachable and used by authenticated staff. Exposure is most likely in legacy Mantis bugtracker deployments that still include the named PHP pages and accept untrusted input on public or internal web interfaces. The bundle does not identify affected versions. Prioritize discovery first. This is not marked as actively exploited in the provided sources, but legacy issue trackers can contain sensitive operational data and credentials, making exposed vulnerable instances worth prompt remediation. Mitigation focus: Inventory any Mantis bugtracker deployments, including archived internal systems.; Check Mantis, Secunia, SecurityFocus, and X-Force references for fixed-version guidance.; Apply a vendor-supported upgrade or backported fix after confirming exposure..

Prepared

Jun 29, 2026, 23:55 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.