CVE-2007-3684

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-11 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) q and (2) t parameters in (a) db.php and (b) rpc.php.

Affected products

Masuga Design Unobtrusive Ajax Star Rating Bar: through 1.1.0

References

http://secunia.com/advisories/25985
http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml
http://www.osvdb.org/35933
http://www.osvdb.org/35934
http://www.securityfocus.com/bid/24840
https://exchange.xforce.ibmcloud.com/vulnerabilities/35328
http://secunia.com/advisories/25985
http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml
http://www.osvdb.org/35933
http://www.osvdb.org/35934
http://www.securityfocus.com/bid/24840
https://exchange.xforce.ibmcloud.com/vulnerabilities/35328

Get alerted when CVE-2007-3684 or the next vulnerability affects your stack