Fedora 20 : rubygem-will_paginate-3.0.4-5.fc20 (2014-0066)

Fix XSS vulnerabilities CVE-2013-6459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Ruby will_paginate Gem跨站脚本漏洞

CVE ID:CVE-2013-6459 Ruby是跨平台、面向对象的动态类型编程语言。willpaginate是一个分页插件，提供将搜索结果进行分页显示的功能。 willpaginate gem for Ruby存在跨站脚本漏洞。远程攻击者可通过与生成的分页链接相关的输入利用该漏洞注入任意Web脚本或HTML。 0 willpaginate gem for Ruby 3.x 厂商补丁： Ruby ----- 厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://github.com/mislav/willpaginate/releases/tag/v3.0.5...

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

CVE-2013-6459

The CVE-2013-6459 entry concerns the will_paginate gem for Ruby, vulnerable before version 3.0.5 to Cross-site Scripting (XSS) via generated pagination links. Public references confirm the issue and link to the fixed release (3.0.5) from the gem’s release notes. In practice, an attacker could ind...

CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links. It was found that ruby willpaginate is vulnerable to a XSS via malformed input that cause paginatio...

CVE-2012-6459

Technical details for CVE-2012-6459 are not publicly available in the provided documents; sources repeat the same vulnerability description without specifics. Monitor for updates.

TeamViewer Detection

Binary data 6459.prm...

CVE-2008-6459

CVE-2008-6459 affects TYPO3’s auto BE User Registration (autobeuser) extension 0.0.2 and earlier. The issue is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, integrity, and availability....

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by 1 log.php or 2 logerror.php, a different vulnerability than CVE-2007-6459...

CVE-2007-6459

The CVE-2007-6459 entry affects Anon Proxy Server 0.100 (and likely 0.101). The vulnerability allows remote command execution via shell metacharacters in the host parameter to diagdns.php and in the host (and possibly the port) parameter to diagconnect.php. This is explicitly described as a separ...

CVE-2006-6459

Cross-site scripting XSS vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the 1 Name and 2 Information fields when adding a new site toplistnew action...

CVE-2006-6459

CVE-2006-6459 describes a cross-site scripting (XSS) vulnerability in PhpBB Toplist 1.3.7. The flaw resides in toplist.php, allowing remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (action: toplistnew). The CVSS metrics in...