Lucene search

PRIOn knowledge basePRION:CVE-2007-1181

HistoryMar 02, 2007 - 9:18 p.m.

Design/Logic Flaw

2007-03-0221:18:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.5%

JSON

WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors.

CPENameOperatorVersion
webappeq0.9.9.3
webappeq0.9.9.3.2
webappeq0.9.9.2.1
webappeq0.9.9.2
webappeq0.9.9.1
webappeq0.9.9
webappeq0.9.9.3.1
webappeq0.9.9.4

Name	Operator	Version
webapp	eq	0.9.9.3
webapp	eq	0.9.9.3.2
webapp	eq	0.9.9.2.1
webapp	eq	0.9.9.2
webapp	eq	0.9.9.1
webapp	eq	0.9.9
webapp	eq	0.9.9.3.1
webapp	eq	0.9.9.4

References

osvdb.org/33291

secunia.com/advisories/24080

www.securityfocus.com/bid/22563

www.vupen.com/english/advisories/2007/0604

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.5%

JSON

Related for PRION:CVE-2007-1181