EDB-33402
functionalRuby on Rails 2.3.5 - 'protect_from_forgery' Cross-Site Request Forgery
view exploit source exploit_dbverifiedtype remoteauthor p0dejepublished 2009-12-14catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-7248US | medium6.8 | Exploit | ||
Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request for… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan