PT-2014-2903

Name of the Vulnerable Software and Affected Versions The Square Squash affected versions not specified Description The issue allows remote attackers to execute arbitrary code. This can be achieved via a YAML document in two parameters: the namespace parameter to the deobfuscation function or the...

CVE-2013-5036: Improper Control of Generation of Code

The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the 1 namespace parameter to the deobfuscation function or 2 sourcemap parameter to the sourcemap function in app/controllers/api/v1controller.rb...