Description

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

Remediation

References

CVE-2006-4111

Related Vulnerabilities

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-46144)

WordPress Plugin Downloads Manager Arbitrary File Upload (1.0)

MySQL CVE-2017-10378 Vulnerability (CVE-2017-10378)

WordPress Plugin Magic Fields 2 Cross-Site Scripting (2.3.2.4)

Jenkins Improper Input Validation Vulnerability (CVE-2021-21606)

Severity

High

Classification

CVE-2006-4111 CWE-94

Tags

Missing Update Known Vulnerabilities