EUVD-2007-1175

Malware in sbrugna...

CVE-2007-1186

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2007-1177

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

Design/Logic Flaw

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2007-1180

WebAPP before 0.9.9.5 does not check referrers in certain forms, which might facilitate remote cross-site request forgery CSRF attacks or have other unknown impact...

CVE-2007-1182

WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact...