← Database

CVE-2007-3686

HIGH CVSS: 7.5 Published: 2007-07-11 Modified: 2026-06-16

Description

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.

Affected Platforms

Masuga Design Unobtrusive Ajax Star Rating Bar

Weakness Type

NVD-CWE-Other

References