Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le janvier 04, 2013, 22:48:42

Titre: [ThreatPost]SQL Injection Flaw Haunts All Ruby on Rails Versions
Posté par: igor51 le janvier 04, 2013, 22:48:42
SQL Injection Flaw Haunts All Ruby on Rails Versions

SQL Ruby on RailsAll of the current versions of the Ruby on Rails Web framework have a SQL injection vulnerability that could allow an attacker to inject code into Web applications. The vulnerability is a serious one given the widespread use of the popular framework for developing Web apps, and the maintainers of Ruby on Rails have released new versions that fixes the flaw, versions 3.2.10, 3.1.9 and 3.0.18. 

read more


Source: SQL Injection Flaw Haunts All Ruby on Rails Versions (http://threatpost.com/en_us/blogs/sql-injection-flaw-haunts-all-ruby-rails-versions-010313)