oval:org.mitre.oval:def:19558
Definition Id: oval:org.mitre.oval:def:19558 | |||
Oval ID: | oval:org.mitre.oval:def:19558 | ||
Title: | DSA-2466-1 rails - cross site scripting | ||
Description: | Sergey Nartimov discovered that in Rails, a Ruby based framework for web development, when developers generate html options tags manually, user input concatenated with manually built tags may not be escaped and an attacker can inject arbitrary HTML into the document. | ||
Family: | unix | Class: | patch |
Reference(s): | DSA-2466-1 CVE-2012-1099 | Version: | 5 |
Platform(s): | Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | rails |
Definition Synopsis: | |||
|
Definition Id: oval:org.mitre.oval:def:12959 | |||
Oval ID: | oval:org.mitre.oval:def:12959 | ||
Title: | Debian 6.0 is installed | ||
Description: | Debian 6.0 (squeeze) is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian:6.0 | Version: | 6 |
Platform(s): | Debian 6.0 | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:19558 |
Definition Id: oval:org.mitre.oval:def:24894 | |||
Oval ID: | oval:org.mitre.oval:def:24894 | ||
Title: | Debian GNU/Linux is installed | ||
Description: | Debian GNU/Linux is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian_gnu/linux | Version: | 3 |
Platform(s): | Debian GNU/Linux | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:19558 |
Definition Id: oval:org.mitre.oval:def:24698 | |||
Oval ID: | oval:org.mitre.oval:def:24698 | ||
Title: | Debian GNU/kFreeBSD is installed | ||
Description: | Debian GNU/kFreeBSD is installed | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:debian:debian_gnu/kfreebsd | Version: | 3 |
Platform(s): | Debian GNU/kFreeBSD | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:19558 |