Comment Comment by nimblegorilla You are providing a valuable service, but is Metasploit really necessary for this? I think this is a simpler command:'grep rails Gemfile.lock'If you don't see a rails version of 3.2.1, 3.1.10, 3.0.19, or 2.3.15 then you are vulnerable. Yes?I guess in theory an attacker could have compromised your server and changed the rails version number... parent nimblegorilla 13 years ago
'grep rails Gemfile.lock'
If you don't see a rails version of 3.2.1, 3.1.10, 3.0.19, or 2.3.15 then you are vulnerable. Yes?
I guess in theory an attacker could have compromised your server and changed the rails version number...