Add Ruby on Rails SQL injection (Active Record) advisory

Please double check! Hope it makes sense to split the OSVDB files including different versions.
This should be `"< 4.0.0"`