CVE-2007-3686

Description

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35329

http://www.securityfocus.com/bid/24840

http://www.osvdb.org/35936

http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml

http://secunia.com/advisories/25985

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS