CVE-2006-4111

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

Published: Aug 14, 2006
Updated: Nov 9, 2025
CVE: CVE-2006-4111
GHSA: GHSA-rvpq-5xqx-pfpp
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-94

Affected Software
References

Software	From	Fixed in
rubyonrails / ruby_on_rails	0.8.0	0.8.0.x
rubyonrails / ruby_on_rails	0.5.7	0.5.7.x
rubyonrails / ruby_on_rails	0.7.0	0.7.0.x
rubyonrails / ruby_on_rails	-	1.1.4.x
rubyonrails / ruby_on_rails	0.8.5	0.8.5.x
rubyonrails / ruby_on_rails	0.6.0	0.6.0.x
rubyonrails / ruby_on_rails	0.5.6	0.5.6.x
rubyonrails / ruby_on_rails	0.9.0	0.9.0.x
rubyonrails / ruby_on_rails	0.5.5	0.5.5.x
rubyonrails / ruby_on_rails	0.5.0	0.5.0.x
rubyonrails / ruby_on_rails	0.6.5	0.6.5.x
rubyonrails / rails	0.9.1	0.9.1.x
rubyonrails / rails	0.9.2	0.9.2.x
rubyonrails / rails	0.9.3	0.9.3.x
rubyonrails / rails	0.9.4	0.9.4.x
rubyonrails / rails	0.9.4.1	0.9.4.1.x
rubyonrails / rails	0.10.0	0.10.0.x
rubyonrails / rails	0.10.1	0.10.1.x
rubyonrails / rails	0.11.0	0.11.0.x
rubyonrails / rails	0.11.1	0.11.1.x
rubyonrails / rails	0.12.0	0.12.0.x
rubyonrails / rails	0.12.1	0.12.1.x
rubyonrails / rails	0.13.0	0.13.0.x
rubyonrails / rails	0.13.1	0.13.1.x
rubyonrails / rails	0.14.1	0.14.1.x
rubyonrails / rails	0.14.2	0.14.2.x
rubyonrails / rails	0.14.3	0.14.3.x
rubyonrails / rails	0.14.4	0.14.4.x
rubyonrails / rails	1.0.0	1.0.0.x
rubyonrails / rails	1.1.1	1.1.1.x
rubyonrails / rails	1.1.2	1.1.2.x
rubyonrails / rails	1.1.3	1.1.3.x
rubyonrails / rails	1.1.0	1.1.0.x
rails	1.1.0	1.1.6

Vulnerability Database

300,830

CVE-2006-4111

Deep Security Visibility Without the Complexity