← Database

CVE-2007-3684

HIGH CVSS: 7.5 Published: 2007-07-11 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) q and (2) t parameters in (a) db.php and (b) rpc.php.

Affected Platforms

Masuga Design Unobtrusive Ajax Star Rating Bar

Weakness Type

NVD-CWE-Other

References