ohio813 / owaspbwa

Automatically exported from code.google.com/p/owaspbwa
0 stars 0 forks source link

Ruby WebApp #27

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
http://rubyforge.org/ has a bunch of ruby apps, we could pick one or two from 
there.  I see http://rubyforge.org/projects/redmine/ is one of the top 
downloads for that.  there is a command inection vuln and a csrf on 
http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description
=redmine&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&fil
ter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=

Original issue reported on code.google.com by MichaelTCyr@gmail.com on 25 Apr 2011 at 5:29

GoogleCodeExporter commented 9 years ago
That works for me.

Original comment by chuck.f....@gmail.com on 26 Apr 2011 at 1:06

GoogleCodeExporter commented 9 years ago
This app can integrate into postgresql... I think its a perfect candidate to 
kill 2 birds with one stone!

Only problem is that /var/lib/postgresql/ needs to be a sym link to 
/owaspbwa/owaspbwa-svn/var/lib/postgresl so that we can svn the databases.

Maybe we should fix this up before adding the app.

Original comment by MichaelTCyr@gmail.com on 26 Apr 2011 at 8:57

GoogleCodeExporter commented 9 years ago
http://www.redmine.org/projects/redmine/wiki/RedmineInstall

Original comment by MichaelTCyr@gmail.com on 26 Apr 2011 at 10:40

GoogleCodeExporter commented 9 years ago
Added PostgreSQL to SVN in 0.94alpha1

Original comment by chuck.f....@gmail.com on 2 May 2011 at 1:34

GoogleCodeExporter commented 9 years ago

Original comment by MichaelTCyr@gmail.com on 3 May 2011 at 12:22

GoogleCodeExporter commented 9 years ago
Install requires this to be run: 
gem install rails -v=2.3.5
apt-get install libdbd-pg-ruby
apt-get install libapache2-mod-passenger

Not sure where that installs it to, so prob have to do that on the host.

Original comment by MichaelTCyr@gmail.com on 3 May 2011 at 3:18

GoogleCodeExporter commented 9 years ago
Chuck ran the commands above on the master VM. 

Original comment by chuck.f....@gmail.com on 4 May 2011 at 2:02

GoogleCodeExporter commented 9 years ago
root@owaspbwa:/owaspbwa/owaspbwa-svn# svn commit -m "Added Redmine v.9.x per 
issue 27" var/www/redmine/ etc/apache2/sites-available/default 
var/lib/postgresql/ 
svn: Commit failed (details follow):
svn: Illegal repository URL ''

GRRRRRRRR

Original comment by MichaelTCyr@gmail.com on 6 May 2011 at 12:38

GoogleCodeExporter commented 9 years ago
I think i figured it out, will try again early next week.

Original comment by MichaelTCyr@gmail.com on 6 May 2011 at 1:18

GoogleCodeExporter commented 9 years ago
rev 226 and rev 227 got this up and running, but it needs tweeking to look 
correct (possible issue with the root not being / but being /redmine instead)

Original comment by MichaelTCyr@gmail.com on 8 May 2011 at 11:58

GoogleCodeExporter commented 9 years ago
Working correctly as of 228.

Original comment by MichaelTCyr@gmail.com on 9 May 2011 at 12:36