Description
Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- starrating-unspecified-sql-injection(50417) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=681352&group_id=160495
- 54369 vdb-entry
- 35053 third-party-advisory
- 34899 vdb-entry