CVE-2010-3070: Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows re...

Security readout for executives and security teams

This is a cross-site scripting issue in NuSOAP 0.9.5. If an exposed PHP application uses vulnerable NuSOAP classes, a remote attacker may be able to inject script or HTML through PATH_INFO and run it in a user's browser context. Exposure is most likely in legacy PHP applications, packaged NuSOAP 0.9.5 deployments, or products bundling NuSOAP, including older MantisBT references. The source bundle does not enumerate complete affected products or versions. Prioritize if legacy PHP, MantisBT, or bundled NuSOAP remains internet-facing. The risk is browser-session compromise rather than direct server takeover, but exposed administrative users can raise business impact. Mitigation focus: Identify applications or packages using NuSOAP 0.9.5.; Apply vendor or distribution updates referenced for NuSOAP packages.; For MantisBT, review the 1.2.3 release and related fix guidance..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.