CVEvulnerability
CVE-2007-1179
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recommend feature, Email Article (2) senders and (3) recipients, (4) New User Approval, (5) Edit Profiles, (6) the Newsletter Subscription form, (7) the Recommend form, and (8) sending of articles, which has unknown impact, and remote attack vectors related to spam attacks and possibly other attacks.
Affected configurations
• web-app.org webapp (<= 0.9.9.4)
References
- http://osvdb.org/33284 osvdb.org
- http://secunia.com/advisories/24080 secunia.com
- http://www.securityfocus.com/bid/22563 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 Patch, Vendor Advisory
- http://osvdb.org/33284 osvdb.org
- http://secunia.com/advisories/24080 secunia.com
- http://www.securityfocus.com/bid/22563 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 Patch, Vendor Advisory