完整标题: Action Pack Multiple Vulnerabilities 
类别: remote exploits
平台: multiple
There are multiple weaknesses in the parameter parsing code for Ruby on Rails which allows attackers to bypass authentication systems, inject arbitrary SQL, inject and execute arbitrary code, or perform a denial of service attack on a Rails application.

Fixed Versions: 3.2.11, 3.1.10, 3.0.19, 2.3.15

# 0day.today @ http://0day.today/