Ruby on Rails vulnerable to mass assignment and SQL injection(zweitag.de)

http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-mass-assignment-and-sql-injection