SQL Injection Vulnerability Affected All Versions of Ruby on Rails: SQL Injection Vulnerability Affected All V...

SQL Injection Vulnerability Affected All Versions of Ruby on Rails ~ VOGH- VOICE OF GREYHAT| Leading Resource of Cyber-Security,Hacking News

SQL Injection Vulnerability Affected All Versions of Ruby on Rails: SQL Injection Vulnerability Affected All V...

flaws which has affected all the current version of Ruby on Rails web framework. While exploiting the vulnerability an attacker can inject and even execute malicious codes into the web application. "Due to the way dynamic finders in Active Record extract options from method parameters, a method parameter can mistakenly be used as a scope. Carefully crafted requests can use the scope to inject arbitrary SQL," explained the Rails framework's developers. As soon as this vulnerability has been spotted in the wild, the maintainers of Ruby on Rails have released new versions that addresses the flaw, versions 3.2.10, 3.1.9 and 3.0.18 . In their advisory Ruby on Rails team recommends that users running affected versions, which is essentially anyone using Ruby on Rails, upgrade immediately to one of the fixed versions mentioned earlier. "We're sorry to drop a release like this so c...

Full article: http://www.voiceofgreyhat.com/2013/01/SQL-Injection-Vulne...

Tweets

@claysql » 08 Jan '13, 1am
RT @mrdenny: Holy Crap. RT @Phil_Factor: SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] > gosh
@deadbird1980 » 07 Jan '13, 9pm
SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] via @zite
@netsecured99 » 07 Jan '13, 8pm
RT @Phil_Factor2013SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] > gosh: SQL Injection Vuln...
@mrdenny » 07 Jan '13, 8pm
Holy Crap. RT @Phil_Factor: SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] > gosh
@Phil_Factor » 07 Jan '13, 8pm
SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] > gosh
@loveuavik » 07 Jan '13, 6pm
#SQL-i #Vulnerability Affected All Versions of @rails [link] #securitynews #download #vogh
@teamgreyhat » 07 Jan '13, 6pm
SQL Injection Vulnerability Affected All Versions of Ruby on Rails ~ VOGH- VOICE OF GREYHAT| Leading [link]
@ajransaputra » 07 Jan '13, 5pm
RT @binushacker: #Cyberwar #Infosec SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] #Antisec #Anonymous
@netsecured99 » 07 Jan '13, 5pm
RT @binushacker2013#Cyberwar #Infosec SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] #Antise...
@binushacker » 07 Jan '13, 4pm
#Cyberwar #Infosec SQL Injection Vulnerability Affected All Versions of Ruby on Rails [link] #Antisec #Anonymous
@xzyt3r » 07 Jan '13, 12pm
SQL Injection Vulnerability Affected All Versions of Ruby on Rails: SQL Injection Vulnerability Affected All V... [link]
@RatsMovement » 07 Jan '13, 12pm
SQL Injection Vulnerability Affected All Versions of Ruby on Rails: SQL Injection Vulnerability Affected All V... [link]

SQL Injection Vulnerability Affected All Versions of Ruby on Rails ~ VOGH- VOICE OF GREYHAT| Leading Resource of Cyber-Security,Hacking News

SQL Injection Vulnerability Affected All Versions of Ruby on Rails: SQL Injection Vulnerability Affected All V...

Tweets

All Ruby on Rails versions affected by SQL inje...

sql injection vulnerability in Active Record in...

#Anonymous #Cyberwar CVE-2012-5664 :All Ruby on...

SQL injection vulnerability hits all Ruby on Ra...

SQL injection vulnerability hits all Ruby on Ra...

All Ruby On Rails Versions Suffer SQL Injection...

All Ruby On Rails Versions Suffer SQL Injection...

SQL Injection Flaw Haunts All Ruby on Rails Ver...

SQL Injection Flaw Haunts All Ruby on Rails Ver...

Ruby on Rails 3.2.10 Released to Address SQL In...

SQL Injection Vulnerability in several versions...

Ruby on Rails has SQL injection vuln

SQL Injection Vulnerability in Ruby on Rails; a...

Ruby on Rails updates address SQL injection fla...

Ruby on Rails security updates address SQL inje...