CVE-2011-2930

CVE-2011-2930 describes SQL injection in the quote_table_name method of ActiveRecord adapters in Ruby on Rails. Affected are Rails versions: before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5, enabling remote attackers to execute arbitrary SQL via a crafted column name. The Connected ...

CVE-2011-2197

CVE-2011-2197 concerns Ruby on Rails XSS protection: the safe-buffer mutation handling in Rails’ XSS prevention can be bypassed, enabling remote XSS via crafted input. Affected: Rails 2.x before 2.3.12; Rails 3.0.x before 3.0.8; Rails 3.1.x before 3.1.0.rc2. Root cause per advisory: improper muta...

CVE-2011-2931

CVE-2011-2931 : Rails contains an XSS vulnerability in the strip_tags helper (actionpack/lib/action_controller/vendor/html-scanner/html/node.rb) that allows remote attackers to inject arbitrary script/HTML via a tag with an invalid name. Affected versions are Rails before 2.3.13, 3.0.x before 3.0...

CVE-2011-2932

CVE-2011-2932 is a cross-site scripting (XSS) vulnerability in Ruby on Rails’ activesupport core:_string/output_safety.rb, linked to a UTF-8 escaping issue. Affected versions include Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5. The issue enables remote injection of sc...

CVE-2011-4319

CVE-2011-4319 is a cross-site scripting (XSS) vulnerability affecting the i18n translations helper in Ruby on Rails. The issue exists in Rails 3.0.x up to before 3.0.11 and Rails 3.1.x up to before 3.1.2, and in the rails_xss plugin for Rails 2.3.x. An attacker can trigger XSS by supplying a tran...

CVE-2011-2929

CVE-2011-2929 affects Ruby on Rails: the template selection in actionpack/lib/action_view/template/resolver.rb mishandles glob characters in Rails 3.0.x (pre-3.0.10) and 3.1.x (pre-3.1.0.rc6), enabling remote attackers to render arbitrary views via a crafted URL. This is due to a filter skipping ...