CVE-2007-3686 CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER paramet...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| masuga design unobtrusive ajax star rating bar | <= 1.1.9 | No fix listed |
References
- 25985 third-party-advisory vendor-advisory
- www.cirt.net patch vendor-advisory
- 35936 vdb-entry
- 24840 vdb-entry
- unobtrusive-ajax-db-crlf-injection(35329) vdb-entry