Archive
22 June 2012
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High —
activerecord vulnerable to SQL Injection
The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL inj…