CVE-2007-3686

The CVE-2007-3686 entry describes a CRLF injection vulnerability in the Unobtrusive Ajax Star Rating Bar prior to 1.2.0. The flaw occurs in db.php and allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter. Public references corroborate ...

CVE-2006-3686

Technical details about CVE-2006-3686 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

WebInspect Detection

Binary data 3686.prm...

CVE-2005-3686

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the 1 DateFrom or 2 DateUntil parameter to forum.php...

CVE-2005-3686

CVE-2005-3686 describes an SQL injection vulnerability in the Unclassified NewsBoard (UNB) product. The issue resides in the search.inc.php component and is exploitable via the forum.php path using the (1) DateFrom or (2) DateUntil parameters. The root cause is improper handling of user-supplied ...