Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Nzkoz

#37954of 56,330
7.5Total CVSS
Vulnerabilities · 1
PT-2011-2351
7.5
2011-02-21
Ruby · Ruby On Rails · CVE-2011-0448
**Name of the Vulnerable Software and Affected Versions** Ruby on Rails versions 3.0.x through 3.0.3 **Description** The issue allows remote attackers to conduct SQL injection attacks via a non-numeric argument to the limit function, as it does not ensure that arguments specify integer values. **Recommendations** For Ruby on Rails versions 3.0.x through 3.0.3, update to version 3.0.4 or later to resolve the issue.