EUVD-2017-0210

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Unspecified Ruby on Rails vulnerability allows remote code execution via improperly handled URLs

Reporter	Title	Published	Views	Family All 16
CVE	CVE-2006-4112	14 Aug 200621:00	–	cve
Cvelist	CVE-2006-4112	14 Aug 200621:00	–	cvelist
Debian CVE	CVE-2006-4112	14 Aug 200621:00	–	debiancve
Tenable Nessus	GLSA-200608-20 : Ruby on Rails: Several vulnerabilities	21 Aug 200600:00	–	nessus
Tenable Nessus	Ruby on Rails Routing Code URL Code Evaluation DoS	14 Aug 200600:00	–	nessus
Github Security Blog	Rails Denial of Service vulnerability	24 Oct 201718:33	–	github
Gentoo Linux	Ruby on Rails: Several vulnerabilities	14 Aug 200600:00	–	gentoo
NVD	CVE-2006-4112	14 Aug 200621:04	–	nvd
OpenVAS	Gentoo Security Advisory GLSA 200608-20 (rails)	24 Sep 200800:00	–	openvas
OSV	DEBIAN-CVE-2006-4112	14 Aug 200621:04	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "d54e75f0-2044-3347-904d-f859a6630fbf",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c1957c65-0a69-3e0e-a65a-ebee5d35235d",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2006-4112
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/28364
github	www.github.com/advisories/GHSA-9wrq-xvmp-xjc8
github	www.github.com/rails/rails
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2006-4112.yml
secunia	www.secunia.com/advisories/21424
secunia	www.secunia.com/advisories/21466
secunia	www.secunia.com/advisories/21749
securitytracker	www.securitytracker.com/id
weblog	www.weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 27.5

EPSS0.07371