Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Nzkoz

#37769de 56,331
7.5CVSS total
Vulnerabilidades · 1
PT-2011-2351
7.5
2011-02-21
Ruby · Ruby On Rails · CVE-2011-0448
**Name of the Vulnerable Software and Affected Versions** Ruby on Rails versions 3.0.x through 3.0.3 **Description** The issue allows remote attackers to conduct SQL injection attacks via a non-numeric argument to the limit function, as it does not ensure that arguments specify integer values. **Recommendations** For Ruby on Rails versions 3.0.x through 3.0.3, update to version 3.0.4 or later to resolve the issue.