CVE-2008-4094

🗓️ 30 Sep 2008 17:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 95 Views

SQL injection vulns in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands

Reporter	Title	Published	Views	Family All 70
Tenable Nessus	Ruby on Rails < 2.1.1 Active Record Multiple Parameter SQL Injection	16 Sep 200800:00	–	nessus
Tenable Nessus	Fedora 8 : rubygem-actionmailer-2.1.1-1.fc8 / rubygem-actionpack-2.1.1-1.fc8 / etc (2008-8282)	16 Oct 200800:00	–	nessus
Tenable Nessus	Fedora 9 : rubygem-actionmailer-2.1.1-1.fc9 / rubygem-actionpack-2.1.1-1.fc9 / etc (2008-8322)	29 Sep 200800:00	–	nessus
Tenable Nessus	FreeBSD : rubygem-rails -- SQL injection vulnerability (8e8b8b94-7f1d-11dd-a66a-0019666436c2)	24 Mar 200900:00	–	nessus
Tenable Nessus	GLSA-200912-02 : Ruby on Rails: Multiple vulnerabilities	22 Dec 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-activerecord (rubygem-activerecord-328)	21 Jul 200900:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : rubygem-activerecord (rubygem-activerecord-5817)	1 Dec 200800:00	–	nessus
FreeBSD	rubygem-rails -- SQL injection vulnerability	8 Sep 200800:00	–	freebsd
Cvelist	CVE-2008-4094	30 Sep 200817:00	–	cvelist
Debian CVE	CVE-2008-4094	30 Sep 200817:00	–	debiancve

NVD

Node

rubyonrails railsMatch0.9.1

OR

rubyonrails railsMatch0.9.2

OR

rubyonrails railsMatch0.9.3

OR

rubyonrails railsMatch0.9.4

OR

rubyonrails railsMatch0.9.4.1

OR

rubyonrails railsMatch0.10.0

OR

rubyonrails railsMatch0.10.1

OR

rubyonrails railsMatch0.11.0

OR

rubyonrails railsMatch0.11.1

OR

rubyonrails railsMatch0.12.0

OR

rubyonrails railsMatch0.12.1

OR

rubyonrails railsMatch0.13.0

OR

rubyonrails railsMatch0.13.1

OR

rubyonrails railsMatch0.14.1

OR

rubyonrails railsMatch0.14.2

OR

rubyonrails railsMatch0.14.3

OR

rubyonrails railsMatch0.14.4

OR

rubyonrails railsMatch1.0.0

OR

rubyonrails railsMatch1.1.0

OR

rubyonrails railsMatch1.1.1

OR

rubyonrails railsMatch1.1.2

OR

rubyonrails railsMatch1.1.3

OR

rubyonrails railsMatch1.1.4

OR

rubyonrails railsMatch1.1.5

OR

rubyonrails railsMatch1.1.6

OR

rubyonrails railsMatch1.2.0

OR

rubyonrails railsMatch1.2.1

OR

rubyonrails railsMatch1.2.2

OR

rubyonrails railsMatch1.2.3

OR

rubyonrails railsMatch1.2.4

OR

rubyonrails railsMatch1.2.5

OR

rubyonrails railsMatch1.2.6

OR

rubyonrails railsMatch1.9.5

OR

rubyonrails railsMatch2.0.0

OR

rubyonrails railsMatch2.0.0rc1

OR

rubyonrails railsMatch2.0.0rc2

OR

rubyonrails railsMatch2.0.1

OR

rubyonrails railsMatch2.0.2

OR

rubyonrails railsMatch2.0.4

OR

rubyonrails railsMatch2.1.0

OR

rubyonrails ruby_on_railsRange≤2.1.0

OR

rubyonrails ruby_on_railsMatch0.5.0

OR

rubyonrails ruby_on_railsMatch0.5.5

OR

rubyonrails ruby_on_railsMatch0.5.6

OR

rubyonrails ruby_on_railsMatch0.5.7

OR

rubyonrails ruby_on_railsMatch0.6.0

OR

rubyonrails ruby_on_railsMatch0.6.5

OR

rubyonrails ruby_on_railsMatch0.7.0

OR

rubyonrails ruby_on_railsMatch0.8.0

OR

rubyonrails ruby_on_railsMatch0.8.5

OR

rubyonrails ruby_on_railsMatch0.9.0

Source	Link
secunia	www.secunia.com/advisories/31910
rorsecurity	www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter/
rails	www.rails.lighthouseapp.com/projects/8994/tickets/288
openwall	www.openwall.com/lists/oss-security/2008/09/16/1
secunia	www.secunia.com/advisories/31909
securityfocus	www.securityfocus.com/bid/31176
rails	www.rails.lighthouseapp.com/projects/8994/tickets/964
gist	www.gist.github.com/8946
openwall	www.openwall.com/lists/oss-security/2008/09/13/2
secunia	www.secunia.com/advisories/31875

23 Apr 2026 00:35Current

10High risk

Vulners AI Score10

CVSS 27.5

EPSS0.03119

cve-2008-4094 sql injection ruby on rails remote attackers activerecord activesupport activeresource actionpack actionmailer