Description
Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.
Remediation
References
Related Vulnerabilities
WordPress Plugin Integration for Gravity Forms and Pipedrive Cross-Site Scripting (1.0.6)
WordPress Plugin WP Symposium Cross-Site Scripting (13.02)
WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Request Forgery (4.7.5)
WordPress Plugin LeaderBoard Cross-Site Request Forgery (1.1.1)
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-22021)