← Back

Five Star Review Script

five_star_review_script

Vendor: Review Script • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-3780
1Review Script
1Five Star Review Script
Apr 23, 2026
Aug 26, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVE-2008-3779
1Review Script
1Five Star Review Script
Apr 23, 2026
Aug 26, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML via the words parameter in a search action.