3 matches found
CVE-2006-1798
SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateitid parameter...
Sql injection
SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateitid parameter...
CVE-2006-1798
CVE-2006-1798 refers to a SQL injection vulnerability in RateIt 2.2, exploitable via the rateit.php script’s rateit_id parameter. The underlying issue is improper sanitization of the rateit_id input, enabling remote attackers to execute arbitrary SQL commands. Affected component: RateIt 2.2, scri...