Vulnerabilities

TI-2008-03622 CVE-2008-3780 · GHSA-7r3g-vgrw-wm39

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote…

LOW 35

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-08-26 No fix listed CWE-89

TI-2008-03621 CVE-2008-3779 · GHSA-qw63-6f9r-7c24

Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script…

LOW 23

Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML via the words parameter in a search action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2008-08-26 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in recommend.php in Five Star Review Script allows remote…

Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script…