Narou (aka Narou.rb) prior to 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.
narou project narou