CVE-2012-5664: Sql Injection on Rails... again
armoredcode.com