Lucene search

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

🗓️ 24 Oct 2017 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

Improper Neutralization of Special Elements in SQL Commands in Ruby on Rails softwar

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 67
OpenVAS	FreeBSD Ports: rubygem-rails	17 Sep 200800:00	–	openvas
OpenVAS	Fedora Update for rubygem-actionmailer FEDORA-2008-8322	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-actionmailer FEDORA-2008-8282	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-actionpack FEDORA-2008-8322	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-activerecord FEDORA-2008-8322	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-activesupport FEDORA-2008-8282	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-actionpack FEDORA-2008-8322	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-rails FEDORA-2008-8282	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygems FEDORA-2008-8322	17 Feb 200900:00	–	openvas
OpenVAS	Fedora Update for rubygem-activerecord FEDORA-2008-8322	17 Feb 200900:00	–	openvas

Vulners

Node

gem activerecordRange<2.1.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-4094
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/45109
lists	www.lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html
rails	www.rails.lighthouseapp.com/projects/8994/tickets/288
rails	www.rails.lighthouseapp.com/projects/8994/tickets/964
openwall	www.openwall.com/lists/oss-security/2008/09/13/2
openwall	www.openwall.com/lists/oss-security/2008/09/16/1
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2008-4094.yml
rorsecurity	www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter
github	www.github.com/rails/rails/commit/ef0ea782b1f5cf7b08e74ea3002a16c708f66645

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2017 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS27.5

EPSS0.02897