by Wazi Wazi

Ruby On Rails – [High]

Analysis

Dec 26, 20121 min

SQL injection vulnerability in the Authlogic gem for Ruby on Rails allows remote attackers to execute arbitrary SQL commands via a crafted parameter in conjunction with a secret_token value, related to certain behavior of find_by_id and other find_by_ methods…. CVE Identifier: CVE-2012-5664 Vulnerability Type(s): Severity: High

Open Source

by Wazi Wazi

Show me more

Ruby On Rails – [High]

More from this author

Ant buildfiles: A look under the carapace

Code Scanning for Technical Governance

Install Moodle to manage courses and classes

3 Open Source Trends that May Affect Your Development Team in the Near Future

Git tips and tricks

How to set up a data source in JBoss

Host your own document storage service with ownCloud

Guide to Choosing Enterprise Quality Open Source Software for Your Company

Show me more

On-device translation: Why smaller, specialized AI models win

Kyndryl, Broadcom expand partnership to push private clouds for AI work

Kubernetes 1.37 advances workload-aware scheduling and cluster networking

Has the hype around ‘Internet of Things’ paid off? | Ep. 145

Episode 1: Understanding Cisco’s Converged SDN Transport

Episode 2: Pluggable Optics and the Internet for the Future

Master Linux Math with the bc Command | Easy CLI Calculations Explained!

Master Linux Math in Seconds: How to Use the expr Command Like a Pro

How to Do Math in the Command Line Using Double Parentheses

Ruby On Rails – [High]

From our editors straight to your inbox

More from this author

Ant buildfiles: A look under the carapace

Code Scanning for Technical Governance

Install Moodle to manage courses and classes

3 Open Source Trends that May Affect Your Development Team in the Near Future

Git tips and tricks

How to set up a data source in JBoss

Host your own document storage service with ownCloud

Guide to Choosing Enterprise Quality Open Source Software for Your Company

Show me more

On-device translation: Why smaller, specialized AI models win

Kyndryl, Broadcom expand partnership to push private clouds for AI work

Kubernetes 1.37 advances workload-aware scheduling and cluster networking

Has the hype around ‘Internet of Things’ paid off? | Ep. 145

Episode 1: Understanding Cisco’s Converged SDN Transport

Episode 2: Pluggable Optics and the Internet for the Future

Master Linux Math with the bc Command | Easy CLI Calculations Explained!

Master Linux Math in Seconds: How to Use the expr Command Like a Pro

How to Do Math in the Command Line Using Double Parentheses