CVE-2017-15384

rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...

CVE-2008-4898: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action...

CVE-2006-4598

Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 go parameter and 2 id parameter in a rate action...