CVEvulnerability
CVE-2007-1178
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.
Affected configurations
• web-app.org webapp (<= 0.9.9.4)
References
- http://osvdb.org/33279 osvdb.org
- http://osvdb.org/33282 osvdb.org
- http://secunia.com/advisories/24080 secunia.com
- http://www.securityfocus.com/bid/22563 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 Patch, Vendor Advisory
- http://osvdb.org/33279 osvdb.org
- http://osvdb.org/33282 osvdb.org
- http://secunia.com/advisories/24080 secunia.com
- http://www.securityfocus.com/bid/22563 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 Patch, Vendor Advisory