Lucene search
RootSSV:60557HistoryJan 05, 2013 - 12:00 a.m.
Ruby on Rails Active Record组件SQL注入漏洞(CVE-2012-6496)
2013-01-0500:00:00
Root
www.seebug.org
44
EPSS
0.004
Percentile
75.2%
CVE ID:CVE-2012-6496
Ruby on Rails是一款Web应用程序框架，构建在Ruby语言之上。
Ruby on Rails Active Record组件存在一个SQL注入漏洞，允许攻击者利用"find_by_*"方法进行SQL注入攻击，可获得敏感信息或控制应用系统。
0
Ruby on Rails 3.0.x
Ruby on Rails 3.1.x
Ruby on Rails 3.2.x
厂商解决方案
Ruby on Rails 3.0.18，3.1.9和3.2.10已经修复此漏洞，建议用户下载使用：
http://www.ruby-lang.org
Related
prion
prion
Sql injection
2013-01-04 04:46:00
Sql injection
2013-01-04 04:46:00
fedora
fedora
[SECURITY] Fedora 18 Update: rubygem-activerecord-3.2.8-2.fc18
2013-01-15 02:31:59
[SECURITY] Fedora 16 Update: rubygem-activerecord-3.0.10-4.fc16
2013-01-15 02:22:33
[SECURITY] Fedora 18 Update: rubygem-activerecord-3.2.8-3.fc18
2013-01-20 03:40:48
openvas
openvas
Gentoo Security Advisory GLSA 201401-22
2015-09-29 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2013-0185
2013-01-21 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2013-0185
2013-01-21 00:00:00
osv
osv
Active Record contains SQL Injection
2017-10-24 18:33:37
Authlogic Information Exposure vulnerability
2022-05-14 00:54:20
gitlab
gitlab
Ruby on Rails find_by_* Methods Authlogic SQL Injection Bypass
2013-01-03 00:00:00
github
github
Active Record contains SQL Injection
2017-10-24 18:33:37
Authlogic Information Exposure vulnerability
2022-05-14 00:54:20
nessus
nessus
FreeBSD : rubygem-rails -- SQL injection vulnerability (b4051b52-58fa-11e2-853b-00262d5ed8ee)
2013-01-09 00:00:00
Fedora 18 : rubygem-activerecord-3.2.8-2.fc18 (2013-0185)
2013-01-15 00:00:00
GLSA-201401-22 : Active Record: SQL injection
2014-01-22 00:00:00
debiancve
debiancve
CVE-2012-6496
2013-01-04 04:46:02
CVE-2012-6497
2013-01-04 04:46:02
veracode
veracode
SQL Command Injection
2019-01-15 08:53:39
Arbitrary File Overwrite
2019-05-02 04:52:24
Cross-Site Scripting (XSS)
2019-05-02 04:52:22
rubygems
rubygems
Ruby on Rails find_by_* Methods Authlogic SQL Injection Bypass
2012-12-21 20:00:00
nvd
nvd
cve
cve
gentoo
gentoo
Active Record: SQL injection
2014-01-21 00:00:00
cvelist
cvelist
CVE-2012-6496
2013-01-04 02:00:00
CVE-2012-6497
2013-01-04 02:00:00
ubuntucve
ubuntucve
CVE-2012-6496
2013-01-04 00:00:00
redhat
redhat
(RHSA-2013:0220) Important: Red Hat OpenShift Enterprise 1.1 update
2013-01-31 00:00:00
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
securityvulns
securityvulns
