Web-app.org Webapp vulnerabilities

• web-app.org webapp The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7... CVE-2007-3424 7.5 HighJune 26, 2007
• web-app.org webapp cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an... CVE-2007-3423 7.5 HighJune 26, 2007
• web-app.org webapp The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to... CVE-2007-3422 7.5 HighJune 26, 2007
• web-app.org webapp The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6)... CVE-2007-3421 7.5 HighJune 26, 2007
• web-app.org webapp The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in... CVE-2007-3420 7.5 HighJune 26, 2007
• web-app.org webapp The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does... CVE-2007-3419 7.5 HighJune 26, 2007
• web-app.org webapp The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7... CVE-2007-3418 6.5 MediumJune 26, 2007
• web-app.org webapp Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org... CVE-2007-3417 4.3 MediumJune 26, 2007
• web-app.org webapp Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2... CVE-2007-3416 5.0 MediumJune 26, 2007
• web-app.net webapp The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2... CVE-2007-3242 7.5 HighJune 15, 2007
• web-app.org webapp web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1)... CVE-2007-1832 5.0 MediumApril 3, 2007
• web-app.org webapp web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write ... CVE-2007-1831 6.0 MediumApril 3, 2007
• web-app.org webapp Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6... CVE-2007-1830 4.3 MediumApril 3, 2007
• web-app.org webapp Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow... CVE-2007-1828 3.5 LowApril 3, 2007
• web-app.org webapp Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9... CVE-2007-1827 6.0 MediumApril 3, 2007
• web-app.org webapp Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6... CVE-2007-1489 6.8 MediumMarch 16, 2007
• web-app.org webapp Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack... CVE-2007-1259 7.5 HighMarch 3, 2007
• web-app.org webapp WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for... CVE-2007-1188 7.5 HighFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain... CVE-2007-1187 5.5 MediumFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact. CVE-2007-1186 5.0 MediumFebruary 28, 2007
• web-app.org webapp The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9... CVE-2007-1185 5.0 MediumFebruary 28, 2007
• web-app.org webapp The default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it... CVE-2007-1184 5.0 MediumFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via... CVE-2007-1183 7.5 HighFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact. CVE-2007-1182 6.4 MediumFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile... CVE-2007-1181 5.0 MediumFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 does not check referrers in certain forms, which might facilitate remote... CVE-2007-1180 4.3 MediumFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1... CVE-2007-1179 5.0 MediumFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar... CVE-2007-1178 7.5 HighFebruary 28, 2007
• web-app.org webapp WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the... CVE-2007-1177 5.8 MediumFebruary 28, 2007
• web-app.org webapp Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote... CVE-2007-1176 4.3 MediumFebruary 28, 2007
• web-app.org webapp Cross-site scripting (XSS) vulnerability in an admin feature in WebAPP before 20070209 allows... CVE-2007-1175 4.3 MediumFebruary 28, 2007
• web-app.org webapp Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 20070214 allow remote... CVE-2007-1174 4.3 MediumFebruary 28, 2007
• web-app.org webapp Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote... CVE-2006-1427 Public exploit 4.3 MediumMarch 28, 2006
• web-app.org webapp apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute... CVE-2005-1628 Public exploit EPSS 10.6% 7.5 HighMay 17, 2005
• web-app.org webapp Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack... CVE-2005-0927 10.0 HighMarch 29, 2005
• web-app.org webapp Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files... CVE-2004-1742 Public exploit 5.0 MediumAugust 24, 2004