2 matches found
mysql-bunuuid-rails vulnerable to SQL injection
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns...
[20090603] - Core - Frontend XSS
Some values were output from the database without being properly escaped. Most strings in question were sourced from the administrator panel...