CVE-2017-17919

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a
rubyonrailsruby_on_rails*

References

Timeline

Published
Dec 29, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-17925.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows usersCVE-2017-179208.1SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commCVE-2017-179245.3PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to adminCVE-2017-179254.8PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter.CVE-2017-179265.3PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with CVE-2017-179275.3PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to seCVE-2017-179289.8PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.CVE-2017-179294.8PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.CVE-2017-17935.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows usersCVE-2017-179308.8PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user pCVE-2017-179319.8PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.CVE-2017-179329.8A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to