rails/rails — pull request #6595 by snyff (2012-06-01 22:02:14+00:00)
Title: Put the table name between backticks... harden exploitation of CVE-2012-...

Put the table name between backticks... harden exploitation of CVE-2012-2661

So far the only exploitation path I found, is using the lack of backtick in this part of the statement