Lucene search

[email protected]CVE-2007-1489

HistoryMar 16, 2007 - 9:19 p.m.

CVE-2007-1489

2007-03-1621:19:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2007-1489

webapp

remote attackers

admin access

csrf vulnerability

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.7%

JSON

Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing “certain consecutive actions,” possibly due to a cross-site request forgery (CSRF) vulnerability.

Affected configurations

NVD

Node

web-app.orgwebappMatch0.9.9.4

web-app.orgwebappMatch0.9.9.5

web-app.orgwebappMatch0.9.9.6

CPENameOperatorVersion
web-app.org:webappweb-app.org webappeq0.9.9.4
web-app.org:webappweb-app.org webappeq0.9.9.5
web-app.org:webappweb-app.org webappeq0.9.9.6

CPE	Name	Operator	Version
web-app.org:webapp	web-app.org webapp	eq	0.9.9.4
web-app.org:webapp	web-app.org webapp	eq	0.9.9.5
web-app.org:webapp	web-app.org webapp	eq	0.9.9.6

References

osvdb.org/33273

secunia.com/advisories/24540

www.attrition.org/pipermail/vim/2007-March/001446.html

www.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=256

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=259

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.7%

JSON

Related for CVE-2007-1489

cvelist1 nvd1 prion1 securityvulns1