Lucene search
MitreCVELIST:CVE-2011-0448HistoryFeb 21, 2011 - 12:00 a.m.
CVE-2011-0448
2011-02-2100:00:00
mitre
www.cve.org
Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.
References
groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source&output=gplain
lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
secunia.com/advisories/43278
securitytracker.com/id?1025063
weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
www.vupen.com/english/advisories/2011/0877
github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474
Related
debiancve
debiancve
CVE-2011-0448
2011-02-21 18:00:01
ubuntucve
ubuntucve
CVE-2011-0448
2011-02-21 00:00:00
github
github
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
gitlab
gitlab
osv
osv
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
prion
prion
Sql injection
2011-02-21 18:00:00
nvd
nvd
CVE-2011-0448
2011-02-21 18:00:01
cve
cve
CVE-2011-0448
2011-02-21 18:00:01
seebug
seebug
Ruby on Rails安全限制绕过和SQL注入漏洞
2011-04-08 00:00:00
openvas
openvas
Ruby on Rails Security Bypass and SQL Injection Vulnerabilities
2011-02-28 00:00:00
Gentoo Security Advisory GLSA 201412-28
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: rubygem-railties-3.0.5-1.fc15
2011-04-05 21:43:09
[SECURITY] Fedora 15 Update: rubygem-actionpack-3.0.5-1.fc15
2011-04-05 21:43:08
[SECURITY] Fedora 15 Update: rubygem-activeresource-3.0.5-1.fc15
2011-04-05 21:43:08
nessus
nessus
Fedora 15 : rubygem-actionmailer-3.0.5-1.fc15 / rubygem-actionpack-3.0.5-1.fc15 / etc (2011-4358)
2011-04-06 00:00:00
openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)
2014-06-13 00:00:00
openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)
2014-06-13 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2014-12-14 00:00:00