CVEvulnerability

CVE-2007-1177

5.8 MEDIUM Published 2007-03-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N

Description

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting (XSS).

Affected configurations

• web-app.org webapp 0.9.9 • web-app.org webapp 0.9.9.1 • web-app.org webapp 0.9.9.2 • web-app.org webapp 0.9.9.2.1 • web-app.org webapp 0.9.9.3 • web-app.org webapp 0.9.9.3.1 • web-app.org webapp 0.9.9.3.2 • web-app.org webapp 0.9.9.4

References

http://osvdb.org/33277 osvdb.org
http://osvdb.org/33283 osvdb.org
http://osvdb.org/33286 osvdb.org
http://osvdb.org/33287 osvdb.org
http://secunia.com/advisories/24080 Patch, Vendor Advisory
http://www.securityfocus.com/bid/22563 Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 www.web-app.org
http://osvdb.org/33277 osvdb.org
http://osvdb.org/33283 osvdb.org
http://osvdb.org/33286 osvdb.org
http://osvdb.org/33287 osvdb.org
http://secunia.com/advisories/24080 Patch, Vendor Advisory
http://www.securityfocus.com/bid/22563 Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 www.web-app.org