OVAL Reference oval:org.cisecurity:def:28

Oval Definition:

oval:org.cisecurity:def:28

Revision Date:	2016-02-08	Version:	2
Title:	DSA-3120-1 -- mantis -- security update
Description:	Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code.
Family:	unix	Class:	patch
Status:	ACCEPTED	Reference(s):	CVE-2013-1811 CVE-2013-1934 CVE-2013-4460 CVE-2014-6316 CVE-2014-6387 CVE-2014-7146 CVE-2014-8553 CVE-2014-8554 CVE-2014-8598 CVE-2014-8986 CVE-2014-8988 CVE-2014-9089 CVE-2014-9117 CVE-2014-9269 CVE-2014-9270 CVE-2014-9271 CVE-2014-9272 CVE-2014-9280 CVE-2014-9281 CVE-2014-9388 CVE-2014-9506 DSA-3120-1
Platform(s):	Debian GNU/kFreeBSD 7.0 Debian GNU/Linux 7.0	Product(s):	mantis
Definition Synopsis
Debian 7 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed OR Debian GNU/kFreeBSD is installed AND mantis is earlier than 0:1.2.18-1