Archive
4 January 2013
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High —
Active Record contains SQL Injection
SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic…