Description
CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter.
References
- 25985 third-party-advisory
- http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml
- 24840 vdb-entry
- unobtrusive-ajax-db-crlf-injection(35329) vdb-entry
- 35936 vdb-entry