CVE-2009-1657

Description

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• B2Evolution / starrating_plugin0.7.6
• B2Evolution / starrating_plugin0.6 – 0.6
• B2Evolution / starrating_plugin0.7 – 0.7
• B2Evolution / starrating_plugin0.7.5 – 0.7.5

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/50417
• MISChttp://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495
• MISChttp://osvdb.org/54369
• VENDOR_ADVISORYhttp://secunia.com/advisories/35053
• MISChttp://www.securityfocus.com/bid/34899