LWN.net Logo

mono: cross-site scripting vulnerabilities

Package(s):mono CVE #(s):CVE-2008-3422
Created:August 27, 2009 Updated:December 7, 2009
Description: From the National Vulnerability Database entry: "Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren). "
Alerts:
Mandriva MDVSA-2009:322 2009-12-07
Mandriva MDVSA-2009:268 2009-10-12
Ubuntu USN-826-1 2009-08-26

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds