{"id":"CVE-2007-1178","aliases":["EUVD-2007-1175","GHSA-rcgw-gwg5-jw6q"],"status":"published","title":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar...","description":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01422,"percentile":0.73033,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-02-28T16:00:00Z","modified":"2026-06-16T22:37:05Z","products":[{"vendor":"web-app.org","product":"webapp"}],"references":[{"url":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews\u0026id=250","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0604","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://osvdb.org/33282","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/33279","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/24080","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22563","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1178"},{"url":"https://github.com/advisories/GHSA-rcgw-gwg5-jw6q"}],"sources":{"cve":[{"id":"CVE-2007-1178","description":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.","status":"published","published":"2007-02-28T16:00:00Z","modified":"2024-08-07T12:43:22.569Z","updated_at":"2026-11-02T13:33:41.472948Z"}],"euvd":[{"id":"EUVD-2007-1175","description":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.","status":"published","published":"2007-02-28T16:00:00Z","modified":"2024-08-07T12:43:22Z","updated_at":"2026-11-03T01:38:27.157087Z"}],"ghsa":[{"id":"GHSA-rcgw-gwg5-jw6q","title":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar...","description":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.","status":"published","published":"2022-05-01T17:51:15Z","modified":"2023-01-31T05:03:25Z","updated_at":"2026-11-02T14:48:27.875916Z"}],"nvd":[{"id":"CVE-2007-1178","description":"WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.","status":"published","published":"2007-03-02T21:18:00Z","modified":"2026-06-16T22:37:05.69Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:13.98711Z"}]}}