This page has moved to a
/posts/2013-01-11-ruby-on-rails-remote-code-execution-exploit
.