| Package | Affected versions | Patched versions |
|---|---|---|
| activerecord | < 2.1.1 | 2.1.1 |
| rails | = 0.10.0= 0.10.1= 0.11.0= 0.11.1= 0.12.0= 0.12.1= 0.13.0= 0.13.1= 0.14.1= 0.14.2= 0.14.3= 0.14.4= 0.9.1= 0.9.2= 0.9.3= 0.9.4= 0.9.4.1= 1.0.0= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.9.5= 2.0.0= 2.0.1= 2.0.2= 2.0.4= 2.1.0 | |
| ruby on rails | = 0.5.0= 0.5.5= 0.5.6= 0.5.7= 0.6.0= 0.6.5= 0.7.0= 0.8.0= 0.8.5= 0.9.0≤ 2.1.0 |
Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free