Lucene search
RedhatCVELIST:CVE-2012-2661HistoryJun 22, 2012 - 2:00 p.m.
CVE-2012-2661
2012-06-2214:00:00
redhat
raw.githubusercontent.com
The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.
Related
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-activerecord-3.0.11-3.fc17
2012-06-30 08:27:28
[SECURITY] Fedora 16 Update: rubygem-activerecord-3.0.10-3.fc16
2012-06-30 08:25:19
[SECURITY] Fedora 17 Update: rubygem-activerecord-3.0.11-4.fc17
2013-01-15 02:31:35
openvas
openvas
Fedora Update for rubygem-activerecord FEDORA-2012-9635
2012-08-30 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2012-9639
2012-07-03 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2012-9635
2012-08-30 00:00:00
cvelist
cvelist
CVE-2012-2695
2012-06-22 14:00:00
github
github
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
Active Record vulnerable to SQL Injection via nested query parameters
2017-10-24 18:33:38
prion
prion
Sql injection
2012-06-22 14:55:00
Sql injection
2012-06-22 14:55:00
gitlab
gitlab
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
2017-10-24 00:00:00
SQL injection vulnerability in Active Record
2012-06-22 00:00:00
nessus
nessus
Fedora 17 : rubygem-activerecord-3.0.11-3.fc17 (2012-9635)
2012-07-01 00:00:00
Fedora 16 : rubygem-activerecord-3.0.10-3.fc16 (2012-9639)
2012-07-01 00:00:00
Fedora 16 : rubygem-activerecord-3.0.10-2.fc16 (2012-8982)
2012-06-18 00:00:00
osv
osv
Active Record vulnerable to SQL Injection via nested query parameters
2017-10-24 18:33:38
activerecord vulnerable to SQL Injection
2017-10-24 18:33:38
debiancve
debiancve
CVE-2012-2661
2012-06-22 14:55:01
ubuntucve
ubuntucve
CVE-2012-2661
2012-06-22 00:00:00
CVE-2012-2695
2012-06-22 00:00:00
rubygems
rubygems
CVE-2012-2661 rubygem-activerecord: SQL injection when processing nested query paramaters
2012-05-30 20:00:00
SQL Injection Vulnerability in Ruby on Rails
2017-10-23 21:00:00
suse
suse
Security update for rubygem-actionpack (important)
2012-08-21 19:08:38
Security update for rubygem-activerecord (important)
2012-08-21 20:08:28
Security update for rubygem-activerecord (important)
2012-08-21 19:08:36
cve
cve
CVE-2012-2661
2012-06-22 14:55:01
CVE-2012-2695
2012-06-22 14:55:01
seebug
seebug
SQL Injection Vulnerability in Ruby on Rails
2012-06-01 00:00:00
Ruby on Railsε΅ε₯εζ°SQL注ε
₯ζΌζ΄
2012-06-16 00:00:00
checkpoint_advisories
checkpoint_advisories
Ruby on Rails Hash SQL Injection (CVE-2012-2695)
2012-10-14 00:00:00
freebsd
freebsd
rubygem-activerecord -- multiple vulnerabilities
2012-05-31 00:00:00
redhat
redhat
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
(RHSA-2013:0582) Moderate: Red Hat OpenShift Enterprise 1.1.1 update
2013-02-28 00:00:00
