Lucene search
PRIOn knowledge basePRION:CVE-2011-0448HistoryFeb 21, 2011 - 6:00 p.m.
Sql injection
2011-02-2118:00:00
PRIOn knowledge base
www.prio-n.com
7
Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rails | eq | 3.0.0 beta | |
| rails | eq | 3.0.0 beta2 | |
| rails | eq | 3.0.0 beta3 | |
| rails | eq | 3.0.0 beta4 | |
| rails | eq | 3.0.0 rc | |
| rails | eq | 3.0.0 rc2 | |
| rails | eq | 3.0.1 pre | |
| rails | eq | 3.0.2 pre | |
| rails | eq | 3.0.0 | |
| rails | eq | 3.0.1 |
References
secunia.com/advisories/43278
securitytracker.com/id?1025063
weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
www.vupen.com/english/advisories/2011/0877
github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474
groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source&output=gplain
lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
Related
cvelist
cvelist
CVE-2011-0448
2011-02-21 00:00:00
github
github
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
ubuntucve
ubuntucve
CVE-2011-0448
2011-02-21 00:00:00
debiancve
debiancve
CVE-2011-0448
2011-02-21 18:00:01
cve
cve
CVE-2011-0448
2011-02-21 18:00:01
nvd
nvd
CVE-2011-0448
2011-02-21 18:00:01
osv
osv
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
gitlab
gitlab
openvas
openvas
Ruby on Rails Security Bypass and SQL Injection Vulnerabilities
2011-02-28 00:00:00
Gentoo Security Advisory GLSA 201412-28
2015-09-29 00:00:00
seebug
seebug
Ruby on Rails安全限制绕过和SQL注入漏洞
2011-04-08 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: rubygem-activesupport-3.0.5-1.fc15
2011-04-05 21:43:08
[SECURITY] Fedora 15 Update: rubygem-rails-3.0.5-2.fc15
2011-04-05 21:43:09
[SECURITY] Fedora 15 Update: rubygem-actionmailer-3.0.5-1.fc15
2011-04-05 21:43:09
nessus
nessus
Fedora 15 : rubygem-actionmailer-3.0.5-1.fc15 / rubygem-actionpack-3.0.5-1.fc15 / etc (2011-4358)
2011-04-06 00:00:00
openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)
2014-06-13 00:00:00
openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)
2014-06-13 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2014-12-14 00:00:00