CVE-2006-7188

The CVE-2006-7188 entry concerns WebAPP by web-app.net. Affected component: the search.pl in cgi-lib/user-lib. Before 20060909, remote attackers could read internal forum posts by crafting certain requests, with the issue possibly tied to the $info{'forum'} variable. The provided sources confirm ...

CVE-2006-7189

CVE-2006-7189 describes a cross-site scripting (XSS) vulnerability in the web-app.net WebAPP product, specifically in the shell path CGI-bin/admin/logs.cgi, prior to version 20060403. The flaw allows remote attackers to inject arbitrary web script or HTML through unspecified vectors related to th...

CVE-2006-7190

CVE-2006-7190 describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/user-lib/topics.pl component of WebAPP (web-app.net) prior to 20060515. The issue allows remote attackers to inject arbitrary web scripts or HTML through unknown vectors in the viewnews function, with the root cause...

CVE-2007-1827

Affected software: web-app.org WebAPP before 0.9.9.6. Issue: multiple unspecified flaws in form input validation allow remote authenticated users to corrupt data files, access private files, and execute arbitrary code via certain characters. Root cause is tied to input validation weaknesses; expl...

CVE-2007-1828

CVE-2007-1828 affects WebAPP by web-app.org prior to version 0.9.9.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote authenticated users to inject arbitrary script or HTML via the QUERY_STRING (e.g., drop-down related) or through various forms. This indicates an input h...

CVE-2007-1829

Technical details for CVE-2007-1829 are not publicly available in the provided documents. Monitor for updates from official advisories; the materials here do not specify affected products, impact, vectors, or mitigations.

CVE-2007-1830

Technical details for CVE-2007-1830 are not publicly available in the provided documents. Monitor for updates; no explicit affected product/version, root cause, or remediation details are present in the connected sources.

CVE-2007-1831

CVE-2007-1831 affects web-app.org WebAPP prior to 0.9.9.6. The issue allows remote authenticated users to open files and write the string "wrong data" through a crafted QUERY_STRING. Impact and remediation are not elaborated beyond the described behavior in the provided sources; exploitation deta...

CVE-2006-7186: Undefined Security Weakness

cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functions," a different vulnerability than CVE-2005-0927...

CVE-2006-7187: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the showrecentsearches function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to inject arbitrary web script or HTML via the srch variable...

CVE-2006-7189: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer...

CVE-2007-1828: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via 1 the QUERYSTRING corresponding to drop downs or 2 various forms...

CVE-2007-1829: Undefined Security Weakness

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2006-7190: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc...

CVE-2007-1827: Undefined Security Weakness

Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters."...

CVE-2007-1830: Undefined Security Weakness

Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attackers to obtain administrative access via unknown vectors, related to "something overlooked in the original that was still overlooked in the patch", and possibly related to copying...

CVE-2007-1831: Undefined Security Weakness

web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERYSTRING...

CVE-2007-1832: Undefined Security Weakness

web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files 1 via a crafted filename or 2 by "using percent encoding in forms."...

CVE-2006-7188: Undefined Security Weakness

The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info'forum' variable...

Webapp.org WebAPP < 0.9.9.6 Multiple Vulnerabilities

The version of WebAPP from webapp.org installed on the remote host is affected by multiple, as-yet unspecified issues that could be abused by a remote attacker to completely compromise the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...