Add Ruby on Rails SQL injection (Active Record) advisory

Please double check! Hope it makes sense to split the OSVDB files including different versions.
Could also add `"< 2.0.0"` to the unaffected_versions here to be thorough. Although anyone running 1.X is unlikely to be keeping ontop of CVE's :)