--- title: "CVE-2006-0841\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2006-0841?format=md keywords: index, follow --- # CVE-2006-0841 Publication date 22 February 2006 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide\_status, (2) handler\_id, (3) user\_monitor, (4) reporter\_id, (5) view\_type, (6) show\_severity, (7) show\_category, (8) show\_status, (9) show\_resolution, (10) show\_build, (11) show\_profile, (12) show\_priority, (13) highlight\_changed, (14) relationship\_type, and (15) relationship\_bug parameters in (a) view\_all\_set.php; the (16) sort parameter in (b) manage\_user\_page.php; the (17) view\_type parameter in (c) view\_filters\_page.php; and the (18) title parameter in (d) proj\_doc\_delete.php. NOTE: item 17 might be subsumed by CVE-2005-4522. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | mantis | 9.10 karmic | Fixed 0.19.4-3.2 | | 9.04 jaunty | Fixed 0.19.4-3.2 | | 8.10 intrepid | Fixed 0.19.4-3.2 | | 8.04 LTS hardy | Fixed 0.19.4-3.2 | | 7.10 gutsy | Fixed 0.19.4-3.2 | | 7.04 feisty | Fixed 0.19.4-3.2 | | 6.10 edgy | Fixed 0.19.4-3.2 | | 6.06 LTS dapper | Ignored end of life | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0841) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-0841) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-0841) * [Debian](https://security-tracker.debian.org/tracker/CVE-2006-0841) ### Other references *