NetSight
IP …
high7.5

CVE-2009-1657

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspe…

Impact

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

VendorProductAffected versions
B2evolutionStarrating Plugin
through 0.7.6
Versions 0.6, 0.7, 0.7.5

Weakness classification

CWE-89

References