Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-2661. PoCs published by r4x0r1337.
AI-analyzed exploit summary This repository contains a writeup in Bahasa Melayu for CVE-2012-2661, an SQL injection vulnerability in ActiveRecord. No exploit code or technical details are provided in the README.
Description
The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.
Exploits (1)
This repository contains a writeup in Bahasa Melayu for CVE-2012-2661, an SQL injection vulnerability in ActiveRecord. No exploit code or technical details are provided in the README.