Lucene search
Veracode Vulnerability DatabaseVERACODE:11044HistoryJan 15, 2019 - 8:56 a.m.
SQL Command Injection By Leveraging Improper Range Quoting
2019-01-1508:56:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.009
Percentile
82.6%
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
References
openwall.com/lists/oss-security/2014/07/02/5
rhn.redhat.com/errata/RHSA-2014-0877.html
secunia.com/advisories/59971
secunia.com/advisories/60214
www.debian.org/security/2014/dsa-2982
www.securityfocus.com/bid/68341
access.redhat.com/security/updates/classification/#moderate
groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J
rhn.redhat.com/errata/RHSA-2014-0877.html
Related
osv
osv
Active Record contains SQL Injection via improper range quoting
2017-10-24 18:33:36
prion
prion
Sql injection
2014-07-07 11:01:00
redhat
redhat
(RHSA-2014:0877) Moderate: ror40-rubygem-activerecord security update
2014-07-14 00:00:00
debiancve
debiancve
CVE-2014-3483
2014-07-07 11:01:30
github
github
Active Record contains SQL Injection via improper range quoting
2017-10-24 18:33:36
nessus
nessus
Fedora 20 : rubygem-activerecord-4.0.0-4.fc20 (2014-8065)
2014-08-23 00:00:00
RHEL 6 / 7 : ror40-rubygem-activerecord (RHSA-2014:0877)
2024-04-27 00:00:00
Debian DSA-2982-1 : ruby-activerecord-3.2 - security update
2014-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2014-3483
2014-07-07 00:00:00
gitlab
gitlab
SQL Injection Vulnerabilities Affecting PostgreSQL
2014-07-07 00:00:00
nvd
nvd
CVE-2014-3483
2014-07-07 11:01:30
cve
cve
CVE-2014-3483
2014-07-07 11:01:30
cvelist
cvelist
CVE-2014-3483
2014-07-07 10:00:00
hackerone
hackerone
rubygems
rubygems
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-4.fc20
2014-08-23 02:01:38
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-5.fc20
2014-09-26 09:01:18
openvas
openvas
Fedora Update for rubygem-activerecord FEDORA-2014-8065
2014-08-23 00:00:00
Mageia: Security Advisory (MGASA-2014-0303)
2022-01-28 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update
2014-10-16 00:00:00
mageia
mageia
Updated ruby-actionpack packages fix security issues
2014-07-26 17:09:43
debian
debian
[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update
2014-07-19 10:09:34