Ruby on Rails ':offset' And ':limit' Parameters SQL Injection Vulnerabilities

Threat level definition

Ruby on Rails ':offset' And ':limit' Parameters SQL Injection Vulnerabilities

References:

[patch] - SQL Injection for :limit and :offset (Aaron Bedra)
Rails 2.1.1: Lots of bug fixes (Ruby on Rails)
Ruby on Rails Home Page (Ruby on Rails)
Why you should upgrade to Rails 2.1 (Jonathan)
rPSA-2008-0295-1 rails (rPath Update Announcements )

Privacy Statement
Copyright 2008, SecurityFocus