SQL Injection

curupira is vulnerable to SQL Injection. A specifically crafted attack statement through the create function in passwordscontroller.rb allows a malicious user to inject and execute arbitrary SQL queries on the target system...

curupira is vulnerable to SQL injection

A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file app/controllers/curupira/passwordscontroller.rb. The manipulation leads to sql injection. Upgrading to version 0.1.4 is able to address this issue. The name o...