PT-2011-4189

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.13 Ruby on Rails versions 3.0.x prior to 3.0.10 Ruby on Rails versions 3.1.x prior to 3.1.0.rc5 Description The issue allows remote attackers to execute arbitrary SQL commands via a crafted column name, due ...