Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-3686
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-3686

Description:
CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/35329

SAID
  Secunia Advisory: SA25985

OSVDB
  35936

MISC
  http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml

BID
  24840


Return to the previous page.