CVE-2007-3422

2007-06-2623:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

JSON

The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that contain (1) non-printing characters, (2) certain printing characters that do not commonly occur in URLs, or (3) invalid URL encoding sequences, which has unknown impact and remote attack vectors.