CVE-2013-0156 PoC — Ruby on Rails 输入验证错误漏洞

Source

https://github.com/terracatta/name_reverser

Associated Vulnerability

Title:Ruby on Rails 输入验证错误漏洞 (CVE-2013-0156)
Description:active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.

Description

Silly Rails App to demonstrate vuln CVE-2013-0156

File Snapshot


 [4.0K]  /data/pocs/908a577d5928e54d7f75373e3dab7cd8f486bb54
├── [4.0K]  app
│   ├── [4.0K]  assets
│   │   ├── [4.0K]  javascripts
│   │   │   ├── [ 641]  application.js
│   │   │   └── [ 229]  pages.js.coffee
│   │   └── [4.0K]  stylesheets
│   │       ├── [ 546]  application.css
│   │       ├── [ 176]  pages.css.scss
│   │       └── [1.0K]  scaffolds.css.scss
│   ├── [4.0K]  controllers
│   │   ├── [  80]  application_controller.rb
│   │   └── [ 150]  pages_controller.rb
│   ├── [4.0K]  helpers
│   │   ├── [  29]  application_helper.rb
│   │   └── [  23]  pages_helper.rb
│   ├── [4.0K]  mailers
│   ├── [4.0K]  models
│   └── [4.0K]  views
│       ├── [4.0K]  layouts
│       │   └── [ 239]  application.html.erb
│       └── [4.0K]  pages
│           ├── [ 186]  home.html.erb
│           └── [  79]  reverse.html.erb
├── [4.0K]  config
│   ├── [2.8K]  application.rb
│   ├── [ 191]  boot.rb
│   ├── [ 576]  database.yml
│   ├── [ 156]  environment.rb
│   ├── [4.0K]  environments
│   │   ├── [1.3K]  development.rb
│   │   ├── [2.4K]  production.rb
│   │   └── [1.5K]  test.rb
│   ├── [4.0K]  initializers
│   │   ├── [ 404]  backtrace_silencers.rb
│   │   ├── [ 533]  inflections.rb
│   │   ├── [ 205]  mime_types.rb
│   │   ├── [ 503]  secret_token.rb
│   │   ├── [ 429]  session_store.rb
│   │   └── [ 465]  wrap_parameters.rb
│   ├── [4.0K]  locales
│   │   └── [ 214]  en.yml
│   └── [1.8K]  routes.rb
├── [ 162]  config.ru
├── [4.0K]  db
│   └── [ 343]  seeds.rb
├── [4.0K]  doc
│   └── [ 211]  README_FOR_APP
├── [ 765]  Gemfile
├── [2.4K]  Gemfile.lock
├── [4.0K]  lib
│   ├── [4.0K]  assets
│   └── [4.0K]  tasks
├── [4.0K]  log
├── [4.0K]  public
│   ├── [ 728]  404.html
│   ├── [ 711]  422.html
│   ├── [ 643]  500.html
│   ├── [   0]  favicon.ico
│   └── [ 204]  robots.txt
├── [ 277]  Rakefile
├── [9.0K]  README.rdoc
├── [4.0K]  script
│   └── [ 295]  rails
├── [4.0K]  test
│   ├── [4.0K]  fixtures
│   ├── [4.0K]  functional
│   │   └── [ 160]  pages_controller_test.rb
│   ├── [4.0K]  integration
│   ├── [4.0K]  performance
│   │   └── [ 370]  browsing_test.rb
│   ├── [ 454]  test_helper.rb
│   └── [4.0K]  unit
│       └── [4.0K]  helpers
│           └── [  72]  pages_helper_test.rb
└── [4.0K]  vendor
    ├── [4.0K]  assets
    │   ├── [4.0K]  javascripts
    │   └── [4.0K]  stylesheets
    └── [4.0K]  plugins

35 directories, 44 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!