3 matches found
Sql injection
SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateitid parameter...
CVE-2006-1798
SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateitid parameter...
CVE-2006-1798
CVE-2006-1798 refers to a SQL injection vulnerability in RateIt 2.2, exploitable via the rateit.php script’s rateit_id parameter. The underlying issue is improper sanitization of the rateit_id input, enabling remote attackers to execute arbitrary SQL commands. Affected component: RateIt 2.2, scri...