Skip to content
OpenAdvisories

Archive

4 January 2013

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High —

    Active Record contains SQL Injection

    SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic…