Just a quick write-up on this, I will probably do an exercise on it soon, like I did for the previous bug in ActiveRecord . It's pretty trivial to exploit if you have the right condition... The right condition being: the ability to send symbols to activerecord. When you read the advis...
