tocsin

Debian/rails: unknown

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, Ac

Action: Upgrade rails to 2.1.0-1 or later.

Affected

introducedfixedlast affected
02.1.0-1-

Fixed versions

2.1.0-1

Sources

published · modified · JSON