Lucene search
PRIOn knowledge basePRION:CVE-2017-17919HistoryDec 29, 2017 - 4:29 p.m.
Sql injection
2017-12-2916:29:00
PRIOn knowledge base
www.prio-n.com
2
DISPUTED SQL injection vulnerability in the ‘order’ method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ‘id desc’ parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ruby_on_rails | le | 5.1.4 |
Related
vulnrichment
vulnrichment
CVE-2017-17919
2017-12-29 16:00:00
debiancve
debiancve
CVE-2017-17919
2017-12-29 16:29:00
cve
cve
CVE-2017-17919
2017-12-29 16:29:00
nvd
nvd
CVE-2017-17919
2017-12-29 16:29:00
ubuntucve
ubuntucve
CVE-2017-17919
2017-12-29 00:00:00
cvelist
cvelist
CVE-2017-17919
2017-12-29 16:00:00