CVE:CVE-2007-3684
CNNVD:CNNVD-200707-212
Unobtrusive Ajax Star Rating Bar 1.2.0版本之前的版本中存在多个SQL注入漏洞。远程攻击者可以借助(1)q和(2)(a)db.php和(b)rpc.php的t参数，执行任意SQL指令。
solution:Upgrade masuga_design unobtrusive_ajax_star_rating_bar to a higher version than 1.1.0,and avoid the version (,1.1.0]