Lucene search

[email protected]CVE-2007-1185

HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1185

2007-03-0221:18:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

webapp

0.9.9.5

hidden inputs

remote attack vectors

cve-2007-1185

nvd

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.8%

JSON

The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.

CPENameOperatorVersion
web-app.org:webappweb-app.org webappeq0.9.9.3
web-app.org:webappweb-app.org webappeq0.9.9.3.2
web-app.org:webappweb-app.org webappeq0.9.9.2.1
web-app.org:webappweb-app.org webappeq0.9.9.2
web-app.org:webappweb-app.org webappeq0.9.9.1
web-app.org:webappweb-app.org webappeq0.9.9
web-app.org:webappweb-app.org webappeq0.9.9.3.1
web-app.org:webappweb-app.org webappeq0.9.9.4

CPE	Name	Operator	Version
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.2
web-app.org:webapp	web-app.org webapp	eq	0.9.9.2.1
web-app.org:webapp	web-app.org webapp	eq	0.9.9.2
web-app.org:webapp	web-app.org webapp	eq	0.9.9.1
web-app.org:webapp	web-app.org webapp	eq	0.9.9
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.1
web-app.org:webapp	web-app.org webapp	eq	0.9.9.4

References

osvdb.org/33295

secunia.com/advisories/24080

www.securityfocus.com/bid/22563

www.vupen.com/english/advisories/2007/0604

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for CVE-2007-1185

prion1 securityvulns1