armoredcode.com

Security and software crafting for hacking minds.

Email

Blog
Archives
Disclaimer
About
Myself

Category: Orm

2013

CVE-2012-5664: Sql Injection on Rails... again

Jan 04 2013

posted in activerecord, breakers, cve-2012-5664, mysql, orm, patch, postgresql, rails, ruby, ruby-on-rails, sql-injection

2012

CVE-2012-2661: SqlInjection on Rails

Jun 04 2012

posted in activerecord, breakers, cve-2012-2661, mysql, orm, patch, postgresql, rails, ruby, ruby-on-rails, sql-injection

Recent Posts

Codesake Dawn: the new security source code scanner for ruby
Railsberry chronicles: day 2 - The English penetration test (eventually the day I talk to 450+ oustanding developers)
Railsberry chronicles: day 1 - The unerdware experiment
Railsberry chronicles: day 0 - the trip
I don't care if app is unsecure, it's friday I'm in love

Google+

On about me Paolo Perego is an application security specialist living in Milan, Italy
You can ask him everything, even hire him for some freelancing. Get in touch

Powered by Octopress, Nginx, vim and something to say

Stay in touch

An application security blog since 2012 by Paolo Perego v3.5.0 Contact me Subscribe to RSS feed

Google Analytics Alternative