CVE-2007-1185: Undefined Security Weakness

The 1 Search, 2 Edit Profile, 3 Recommend, and 4 User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors...

CVE-2007-1179: Undefined Security Weakness

WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...

PT-2005-4312 · Chipmunk · Chipmunk Directory Script

Name of the Vulnerable Software and Affected Versions: Chipmunk Directory script affected versions not specified Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the entryID parameter in the recommend.php file...

PT-2005-4311 · Chipmunk · Chipmunk Topsites Script

Name of the Vulnerable Software and Affected Versions: Chipmunk Topsites script affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the ID parameter in the recommend.ph...

myegallery.txt

Product: MyeGallery Versions affected: all /tmp/cmdtemp 2&1; cat /tmp/cmdtemp; rm /tmp/cmdtemp"; $output = obgetcontents; obendclean; printoutput; ? This allows execution of any command on the server with MyeGallery, under the privileges of the Web server usually apache or httpd. 3. Solution...