Ruby WebApp

[GoogleCodeExporter]

http://rubyforge.org/ has a bunch of ruby apps, we could pick one or two from 
there.  I see http://rubyforge.org/projects/redmine/ is one of the top 
downloads for that.  there is a command inection vuln and a csrf on 
http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description
=redmine&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&fil
ter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=

Original issue reported on code.google.com by MichaelTCyr@gmail.com on 25 Apr 2011 at 5:29

[GoogleCodeExporter]

That works for me.

Original comment by chuck.f....@gmail.com on 26 Apr 2011 at 1:06

[GoogleCodeExporter]

This app can integrate into postgresql... I think its a perfect candidate to 
kill 2 birds with one stone!

Only problem is that /var/lib/postgresql/ needs to be a sym link to 
/owaspbwa/owaspbwa-svn/var/lib/postgresl so that we can svn the databases.

Maybe we should fix this up before adding the app.

Original comment by MichaelTCyr@gmail.com on 26 Apr 2011 at 8:57

[GoogleCodeExporter]

http://www.redmine.org/projects/redmine/wiki/RedmineInstall

Original comment by MichaelTCyr@gmail.com on 26 Apr 2011 at 10:40

[GoogleCodeExporter]

Added PostgreSQL to SVN in 0.94alpha1

Original comment by chuck.f....@gmail.com on 2 May 2011 at 1:34

[GoogleCodeExporter]

Original comment by MichaelTCyr@gmail.com on 3 May 2011 at 12:22

• Added labels: Priority-High, Release.94
• Removed labels: Priority-Low

[GoogleCodeExporter]

Install requires this to be run: 
gem install rails -v=2.3.5
apt-get install libdbd-pg-ruby
apt-get install libapache2-mod-passenger


Not sure where that installs it to, so prob have to do that on the host.

Original comment by MichaelTCyr@gmail.com on 3 May 2011 at 3:18

[GoogleCodeExporter]

Chuck ran the commands above on the master VM. 

Original comment by chuck.f....@gmail.com on 4 May 2011 at 2:02

[GoogleCodeExporter]

root@owaspbwa:/owaspbwa/owaspbwa-svn# svn commit -m "Added Redmine v.9.x per 
issue 27" var/www/redmine/ etc/apache2/sites-available/default 
var/lib/postgresql/ 
svn: Commit failed (details follow):
svn: Illegal repository URL ''


GRRRRRRRR

Original comment by MichaelTCyr@gmail.com on 6 May 2011 at 12:38

[GoogleCodeExporter]

I think i figured it out, will try again early next week.

Original comment by MichaelTCyr@gmail.com on 6 May 2011 at 1:18

[GoogleCodeExporter]

rev 226 and rev 227 got this up and running, but it needs tweeking to look 
correct (possible issue with the root not being / but being /redmine instead)

Original comment by MichaelTCyr@gmail.com on 8 May 2011 at 11:58

[GoogleCodeExporter]

Working correctly as of 228.

Original comment by MichaelTCyr@gmail.com on 9 May 2011 at 12:36

• Changed state: Fixed