CVE-2010-3933: Improper Input Validation

Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs...

PT-2010-5174

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 2.3.9 through 3.0.0 Description The issue allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs, due to improper handling of nested attributes. Recommendations For versio...