Uke SQL Injection Vulnerability

Uke is a database of Uke licenses by the individual developer Arkadiusz Kuryłowicz. A SQL injection vulnerability exists in uke, which stems from a problem in an unknown section of the file lib/uke/finder.rb that can lead to sql injection...