Description
Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
Remediation
References
Related Vulnerabilities
WordPress Plugin ZTR Zeumic Work Timer Multiple Unspecified Vulnerabilities (1.0.6)
WordPress Plugin WP-HR Manager:The Human Resources Unspecified Vulnerability (2.9.4)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2935)
MediaWiki CVE-2023-36674 Vulnerability (CVE-2023-36674)
PHP Resource Management Errors Vulnerability (CVE-2010-2225)