Lucene search

[email protected]CVE-2007-1489

HistoryMar 16, 2007 - 9:19 p.m.

CVE-2007-1489

2007-03-1621:19:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2007-1489

webapp

remote attackers

admin access

csrf vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

JSON

Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing “certain consecutive actions,” possibly due to a cross-site request forgery (CSRF) vulnerability.

Affected configurations

NVD

Node

web-app.orgwebappMatch0.9.9.4

web-app.orgwebappMatch0.9.9.5

web-app.orgwebappMatch0.9.9.6

CPENameOperatorVersion
web-app.org:webappweb-app.org webappeq0.9.9.4
web-app.org:webappweb-app.org webappeq0.9.9.5
web-app.org:webappweb-app.org webappeq0.9.9.6

CPE	Name	Operator	Version
web-app.org:webapp	web-app.org webapp	eq	0.9.9.4
web-app.org:webapp	web-app.org webapp	eq	0.9.9.5
web-app.org:webapp	web-app.org webapp	eq	0.9.9.6

References

osvdb.org/33273

secunia.com/advisories/24540

www.attrition.org/pipermail/vim/2007-March/001446.html

www.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=256

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=259

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

JSON

Related for CVE-2007-1489

prion1 cvelist1 nvd1 securityvulns1