CVEvulnerability
CVE-2007-1176
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages, (2) Feedback pages, (3) Search Results pages, and (4) the Statistics Log viewer.
Affected configurations
• web-app.org webapp (<= 0.9.9.4)
References
- http://osvdb.org/33276 osvdb.org
- http://osvdb.org/33288 osvdb.org
- http://osvdb.org/33289 osvdb.org
- http://osvdb.org/33290 osvdb.org
- http://secunia.com/advisories/24080 secunia.com
- http://www.securityfocus.com/bid/22563 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32498 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32499 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32526 exchange.xforce.ibmcloud.com
- http://osvdb.org/33276 osvdb.org
- http://osvdb.org/33288 osvdb.org
- http://osvdb.org/33289 osvdb.org
- http://osvdb.org/33290 osvdb.org
- http://secunia.com/advisories/24080 secunia.com
- http://www.securityfocus.com/bid/22563 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32498 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32499 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32526 exchange.xforce.ibmcloud.com