updated rails as version <3.0.18 suffer from sql-injection vulnerability