Description
Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.
Remediation
References
Related Vulnerabilities
Liferay DXP Observable Discrepancy Vulnerability (CVE-2024-25146)
WordPress Plugin Smart Manager for WooCommerce & WpeC Multiple Unspecified Vulnerabilities (3.9.13)
WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)
Oracle Database Server CVE-2011-0877 Vulnerability (CVE-2011-0877)
WordPress Plugin Ultimate Reviews PHP Object Injection (2.0.18)