CVE-2006-6154: Hscripts Hiox Star Rating System Script

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.

Affected products

• Hscripts Hiox Star Rating System Script: up to and including 1.0

Published 2006-11-28. Last modified 2026-06-16.