CVE-2006-7190: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc...

CVE-2006-7189

Cross-site scripting XSS vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer...

CVE-2006-7187: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the showrecentsearches function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to inject arbitrary web script or HTML via the srch variable...

CVE-2006-7190

CVE-2006-7190 describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/user-lib/topics.pl component of WebAPP (web-app.net) prior to 20060515. The issue allows remote attackers to inject arbitrary web scripts or HTML through unknown vectors in the viewnews function, with the root cause...

CVE-2007-1831

web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERYSTRING...

CVE-2006-7186

cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functions," a different vulnerability than CVE-2005-0927...

CVE-2007-1830: Undefined Security Weakness

Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attackers to obtain administrative access via unknown vectors, related to "something overlooked in the original that was still overlooked in the patch", and possibly related to copying...

CVE-2007-1828: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via 1 the QUERYSTRING corresponding to drop downs or 2 various forms...

CVE-2007-1827: Undefined Security Weakness

Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters."...

CVE-2007-1832: Undefined Security Weakness

web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files 1 via a crafted filename or 2 by "using percent encoding in forms."...

CVE-2007-1828

Multiple cross-site scripting XSS vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via 1 the QUERYSTRING corresponding to drop downs or 2 various forms...

CVE-2007-1828

CVE-2007-1828 affects WebAPP by web-app.org prior to version 0.9.9.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote authenticated users to inject arbitrary script or HTML via the QUERY_STRING (e.g., drop-down related) or through various forms. This indicates an input h...

CVE-2007-1829: Undefined Security Weakness

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2007-1830

Technical details for CVE-2007-1830 are not publicly available in the provided documents. Monitor for updates; no explicit affected product/version, root cause, or remediation details are present in the connected sources.

CVE-2007-1830

Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attackers to obtain administrative access via unknown vectors, related to "something overlooked in the original that was still overlooked in the patch", and possibly related to copying...

Webapp.org WebAPP < 0.9.9.6 Multiple Vulnerabilities

The version of WebAPP from webapp.org installed on the remote host is affected by multiple, as-yet unspecified issues that could be abused by a remote attacker to completely compromise the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Cross site request forgery (csrf)

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2007-1489

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2007-1489

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2007-1489

CVE-2007-1489 affects WebAPP (Web Automated Perl Portal) versions 0.9.9.4–0.9.9.6. The data in connected documents indicates a vulnerability allowing remote attackers to gain admin access by modifying cookies and performing a sequence of actions, with the likely root cause described as a cross-si...