References https://avd.aliyun.com/detail?id=AVD-2016-0752 https://nvd.nist.gov/vuln/detail/CVE-2016-0752 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/framework/Rails-Accept-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E-CVE-2019-5418.md https://www.secpod.com/blog/cisa-issues-warning-ongoing-attacks-exploiting-ruby-on-rails-path-traversal-bug/ https://tttang.com/archive/538/ https://cve.imfht.com/poc_detail/cd627987ef18476195e58f83c252f17aacde417e https://www.linuxidc.com/Linux/2014-05/101435.htm https://www.fastruby.io/rails-3-0-vulnerabilities https://blog.csdn.net/zg_111/article/details/129792406 https://nvd.nist.gov/vuln/detail/CVE-2019-5418 https://www.acunetix.com/vulnerabilities/web/ruby-on-rails-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-cve-2016-0752/ https://devpress.csdn.net/v1/article/detail/154337281
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞仁和兴业(深圳)软件有限公司仁和云ERP userresetPassword.action 存在任意账号密码重置漏洞itC 中心管理服务器actionDetailTmpFile.do 存在任意文件上传漏洞云连ERP管理系统 /gateway/download!download.action 代码执行漏洞用友U8 Cloud MeasureQueryFrameAction SQL 注入漏洞motionEye /action/1/snapshot 权限绕过漏洞(CVE-2026-55863)MasterStudy LMS /wp-admin/admin-ajax.php?action=stm_lms_load_content 文件包含漏洞(CVE-2024-3136)通天星CMSV6车载视频监控平台 /808gps/StandardLoginAction_downLoad.action 文件读取漏洞速达软件 /common/print/print!doSavePrintTpl.action Struts2 代码执行漏洞WordPress Course Booking System /wp-admin/admin-ajax.php cbs_action_booking_delete SQL 注入漏洞(CVE-2025-22785)通天星CMSV6车载视频监控平台 /StandardApiAction_login.action 默认口令漏洞(CVE-2024-29666)itc中心管理服务器actionInitConfig.do存在敏感信息泄漏漏洞