Ruby on Rails Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2006-4111 - Vulnerability Database

Ruby on Rails Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2006-4111

High

Reference: CVE-2006-4111

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-4111

Title: Ruby on Rails Improper Control of Generation of Code (Code Injection) Vulnerability

Overview:

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with quotseverequot or quotseriousquot impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable a different vulnerability than CVE-2006-4112.