UBUNTU-CVE-2018-3769

ruby-grape ruby gem suffers from a cross-site scripting XSS vulnerability via "format" parameter...

CVE-2018-3769

CVE-2018-3769 affects the ruby-grape Ruby gem, described as a cross-site scripting (XSS) vulnerability via the format parameter. Connected sources (NVD, GHSA, OSV, CNVD, Ubuntu/Debian OSV entries, Nessus plugin) consistently report the same issue. The NVD entry lists CVSS v2 base score 4.3 (Mediu...

PT-2018-16187 · Ruby · Ruby-Grape

Name of the Vulnerable Software and Affected Versions: ruby-grape affected versions not specified Description: The ruby-grape ruby gem suffers from a cross-site scripting XSS vulnerability via the format parameter. This issue allows for potential XSS attacks. Recommendations: At the moment, there...

Cross-site Scripting (XSS)

grape is vulnerable to cross-site scripting XSS attacks. The vulnerability exists through error.rb where a rendered response could cause XSS attacks...

ruby-grape Gem has XSS via "format" parameter

When request on API contains the "format" parameter in GET, the input value of this parameter is rendered as the web-server responds with text/html header. Example: http://example.com/api/endpoint?format=%3Cscript%3Ealertdocument.cookie%3C/script%3E...

Type confusion

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...

PT-2013-2146

Name of the Vulnerable Software and Affected Versions multi xml gem version 0.5.2 Grape versions prior to 0.2.6 Description The issue allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service involving nested XML entity references. This c...

Immunity Canvas: GRAPE_INCLUDE

Name| grapeinclude ---|--- CVE| CVE-2008-1963 Exploit Pack| CANVAS Description| Grape Web Statistics Remote File include Notes| CVE Name: CVE-2008-1963 VENDOR: Quate Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1963 CVSS: 7.5...

CVE-2008-1963

PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter...

CVE-2008-1963

CVE-2008-1963 affects Quate Grape Web Statistics 0.2a. A PHP remote file inclusion flaw in includes/functions.php can let an attacker supply a URL in the location parameter to execute arbitrary PHP code. The NVD entry reports a base score of 7.5 (HIGH) with network attack vector and no authentica...

CVE-2008-1963

PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter...

Grape Statistics 0.2a (location) Remote File Inclusion Vulnerability

No description provided by source. Name : Grape Web Statistics Remote File include Vulnerability Download From :http://www.quate.net/link.php?grape Found By : MajnOoNxHaCkEr Home Page : http://www.4rxh.com ============================================================================ Vulne Code In...

Grape Statistics 0.2a - location Remote File Inclusion

Grape Statistics 0.2a - location Remote File Inclusion Name : Grape Web Statistics Remote File include Vulnerability Download From :http://www.quate.net/link.php?grape Found By : MajnOoNxHaCkEr Home Page : http://www.4rxh.com...

Grape Statistics 0.2a (location) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Grape Statistics 0.2a location Remote File Inclusion Vulnerability ==================================================================== Name : Grape Web Statistics Remote...

Grape Statistics 0.2a - 'location' Remote File Inclusion

Name : Grape Web Statistics Remote File include Vulnerability Download From :http://www.quate.net/link.php?grape Found By : MajnOoNxHaCkEr Home Page : http://www.4rxh.com ============================================================================ Vulne Code In File functions.php : Function:...