CVE-2007-1827: Undefined Security Weakness

Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters."...

CVE-2007-1832: Undefined Security Weakness

web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files 1 via a crafted filename or 2 by "using percent encoding in forms."...

CVE-2007-1828

Multiple cross-site scripting XSS vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via 1 the QUERYSTRING corresponding to drop downs or 2 various forms...

CVE-2007-1828

CVE-2007-1828 affects WebAPP by web-app.org prior to version 0.9.9.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote authenticated users to inject arbitrary script or HTML via the QUERY_STRING (e.g., drop-down related) or through various forms. This indicates an input h...

CVE-2007-1829: Undefined Security Weakness

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2006-7190: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc...

CVE-2007-1830

Technical details for CVE-2007-1830 are not publicly available in the provided documents. Monitor for updates; no explicit affected product/version, root cause, or remediation details are present in the connected sources.

CVE-2007-1830

Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attackers to obtain administrative access via unknown vectors, related to "something overlooked in the original that was still overlooked in the patch", and possibly related to copying...

Webapp.org WebAPP < 0.9.9.6 Multiple Vulnerabilities

The version of WebAPP from webapp.org installed on the remote host is affected by multiple, as-yet unspecified issues that could be abused by a remote attacker to completely compromise the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Cross site request forgery (csrf)

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2007-1489

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2007-1489

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2007-1489

CVE-2007-1489 affects WebAPP (Web Automated Perl Portal) versions 0.9.9.4–0.9.9.6. The data in connected documents indicates a vulnerability allowing remote attackers to gain admin access by modifying cookies and performing a sequence of actions, with the likely root cause described as a cross-si...

CVE-2007-1489: Cross-Site Request Forgery (CSRF)

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

Design/Logic Flaw

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2007-1259

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2007-1259

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2007-1259

Technical details about CVE-2007-1259 are not publicly provided in the supplied documents. WebAPP

CVE-2007-1259: Undefined Security Weakness

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2007-1185

The 1 Search, 2 Edit Profile, 3 Recommend, and 4 User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors...