|
|
| |
|
| |
rubygem-rails: SQL injection
| Package(s): | rubygem-rails |
CVE #(s): | CVE-2008-4094
|
| Created: | September 29, 2008 |
Updated: | December 21, 2009 |
| Description: |
From Ruby on Rails Security Project:
An SQL Injection vulnerability has been found in Rails. The issue affects Rails < 2.1.1, namely the :limit and :offset parameters that are not correctly sanitized:
Person.find(:all, :limit => "10; DROP TABLE users;")
A possible attack will work only if you allow the user control these two values as in User.find(:all, :limit => 10, :offset => params[:offset]). Note that will_paginate is not affected, it escapes the values before. |
| Alerts: |
|
( Log in to post comments)
|
|
|