CVE-2009-1657: b2evolution Starrating Plugin

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• b2evolution Starrating Plugin: up to and including 0.7.6; version 0.6 only; version 0.7 only; version 0.7.5 only

Published 2009-05-18. Last modified 2026-06-16.