1231 matches found
CVE-2007-1184
The default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data...
CVE-2007-1187
WebAPP prior to 0.9.9.5 is affected by an information disclosure vulnerability: remote authenticated users without admin privileges can access sensitive information via the Forum Archive feature and Recent Searches. The issue is documented in CVE-2007-1187 with a base impact on confidentiality (P...
CVE-2007-1176
Multiple cross-site scripting XSS vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 Gallery Comments pages, 2 Feedback pages, 3 Search Results pages, and 4 the Statistics Log viewer...
CVE-2007-1183
WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...
CVE-2007-1183
CVE-2007-1183 concerns WebAPP prior to 0.9.9.5, where remote authenticated users can spoof another user’s Real Name via whitespace. The available sources indicate the impact and attack vectors are unknown, with no concrete exploitation details provided. Affected version is explicitly stated as
CVE-2007-1180
WebAPP is affected by CVE-2007-1180. Vulnerability: WebAPP before 0.9.9.5 does not check referrers in certain forms, potentially enabling remote cross-site request forgery (CSRF) or related effects. Affected software: WebAPP (version
CVE-2007-1181
WebAPP before 0.9.9.5 passes 1 Unused Informations and 2 the username through Edit Profile forms, which has unknown impact and attack vectors...
CVE-2007-1178
WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...
WebAPP < 0.9.9.6 Multiple Vulnerabilities
Binary data 3923.prm...
CVE-2006-6703
Multiple cross-site scripting XSS vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/containertabs.jsp, and other unspecified vectors...
CVE-2006-6703
CVE-2006-6703 describes multiple XSS vulnerabilities in Oracle Portal 9i and 10g. The issues allow remote attackers to inject arbitrary JavaScript, e.g., via the tc parameter in webapp/jsp/container_tabs.jsp, with other vectors not detailed here. The NVD metrics indicate a Network attack vector, ...
CVE-2006-6703
Multiple cross-site scripting XSS vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/containertabs.jsp, and other unspecified vectors...
CVE-2006-6688
Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6687
Cross-site scripting XSS vulnerability in Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtaine...
CVE-2006-6688
Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET) are identified as vulnerable to bypassing filtering mechanisms by remote attackers via unknown vectors. The CVSS data indicates NETWORK attack vector, low complexity, no authentication required, with pa...
CVE-2006-6688
Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6687
CVE-2006-6687 describes a cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry notes a net...
BestWebApp Dating Site - login_form.asp?msg Cross-Site Scripting
BestWebApp Dating Site - loginform.asp?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize...
BestWebApp Dating Site Login Component - Multiple Field SQL Injections
source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to stea...
