Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2007-3684

Disclosure Date: July 11, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) q and (2) t parameters in (a) db.php and (b) rpc.php.
0
0
Attacker Value
Unknown

CVE-2007-3685

Disclosure Date: July 11, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
0
0
Attacker Value
Unknown

CVE-2007-3686

Disclosure Date: July 11, 2007 (last updated October 04, 2023)
CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.
0
0