CVEvulnerability
CVE-2007-3419
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.
Affected configurations
• web-app.org webapp (<= 0.9.9.6)
References
- http://osvdb.org/45400 osvdb.org
- http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458 www.web-app.org
- http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip Patch
- http://osvdb.org/45400 osvdb.org
- http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458 www.web-app.org
- http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip Patch