CVEvulnerability

CVE-2007-1188

7.5 HIGH Published 2007-03-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking".

Affected configurations

• web-app.org webapp 0.9.9 • web-app.org webapp 0.9.9.1 • web-app.org webapp 0.9.9.2 • web-app.org webapp 0.9.9.2.1 • web-app.org webapp 0.9.9.3 • web-app.org webapp 0.9.9.3.1 • web-app.org webapp 0.9.9.3.2 • web-app.org webapp 0.9.9.4

References

http://osvdb.org/33299 osvdb.org
http://secunia.com/advisories/24080 Vendor Advisory
http://www.securityfocus.com/bid/22563 Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 www.web-app.org
http://osvdb.org/33299 osvdb.org
http://secunia.com/advisories/24080 Vendor Advisory
http://www.securityfocus.com/bid/22563 Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0604 www.vupen.com
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 www.web-app.org