News for hackers. Stuff that matters.

j_mac

Re:Metasploit Rails 3 Remote Code Execution Hours Away on Thursday January 17, 2013 @12:59PM (#5073978)
Thanks for posting this, you gave me the bits I needed to make a simple test I could use to verify the patch, without needing the metasploit stuff. (on rails 2.3, I don't get the disallowedType error, but I can verify in the logs that the patch works)

http://www.railsperformance.com/2013/01/simple-test-for-rail...