Ruby Gem Features version 0.3.0 suffers from a file injection vulnerability that can lead to cross site scripting…. Ruby Gem Features version 0.3.0 suffers from a file injection vulnerability that can lead to cross site scripting.

Read more http://packetstormsecurity.com/files/123149/features-inject.txt