CVE-2009-3965

HIGH CVSS: 7.5 Published: 2009-11-18 Modified: 2026-06-16

Description

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter.

Affected Platforms

Maniacomputer New5Starrating

Weakness Type

CWE-89

References