CVEvulnerability
CVE-2007-1185
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.
Affected configurations
• web-app.org webapp 0.9.9
• web-app.org webapp 0.9.9.1
• web-app.org webapp 0.9.9.2
• web-app.org webapp 0.9.9.2.1
• web-app.org webapp 0.9.9.3
• web-app.org webapp 0.9.9.3.1
• web-app.org webapp 0.9.9.3.2
• web-app.org webapp 0.9.9.4
References
- http://osvdb.org/33295 osvdb.org
- http://secunia.com/advisories/24080 Vendor Advisory
- http://www.securityfocus.com/bid/22563 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 www.web-app.org
- http://osvdb.org/33295 osvdb.org
- http://secunia.com/advisories/24080 Vendor Advisory
- http://www.securityfocus.com/bid/22563 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 www.web-app.org