CVE-2007-1177: Undefined Security Weakness

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-1182: Undefined Security Weakness

WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact...

WebAPP < 0.9.9.6 Multiple Vulnerabilities

Binary data 3923.prm...

CVE-2006-6703

Multiple cross-site scripting XSS vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/containertabs.jsp, and other unspecified vectors...

CVE-2006-6703

Multiple cross-site scripting XSS vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/containertabs.jsp, and other unspecified vectors...

CVE-2006-6703

CVE-2006-6703 describes multiple XSS vulnerabilities in Oracle Portal 9i and 10g. The issues allow remote attackers to inject arbitrary JavaScript, e.g., via the tc parameter in webapp/jsp/container_tabs.jsp, with other vectors not detailed here. The NVD metrics indicate a Network attack vector, ...

CVE-2006-6703: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/containertabs.jsp, and other unspecified vectors...

CVE-2006-6697: Undefined Security Weakness

CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter...

CVE-2006-6688

Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6687

Cross-site scripting XSS vulnerability in Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtaine...

CVE-2006-6688

Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET) are identified as vulnerable to bypassing filtering mechanisms by remote attackers via unknown vectors. The CVSS data indicates NETWORK attack vector, low complexity, no authentication required, with pa...

CVE-2006-6687

CVE-2006-6687 describes a cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry notes a net...

CVE-2006-6688

Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

BestWebApp Dating Site - login_form.asp?msg Cross-Site Scripting

BestWebApp Dating Site - loginform.asp?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize...

BestWebApp Dating Site Login Component - Multiple Field SQL Injections

source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to stea...

sbwebapp.txt

?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi "command" Linux dprhensim19.doteasy.com...

WebAPPv0.9.9.2.1.txt

By b0rizQ Dork : inurl:"apage/apage.cgi OR powered by WebAPP v0.9.9.2.1 File : apage.cgi Exploits : http://www.exemple.com/cgi-bin/mods/apage/apage.cgi?f=training.htm.|pwd|...

Application orders Linux in WebAPP v0.9.9.2.1

By b0rizQ Dork : inurl:"apage/apage.cgi OR powered by WebAPP v0.9.9.2.1 File : apage.cgi Exploits : http://www.exemple.com/cgi-bin/mods/apage/apage.cgi?f=training.htm.|pwd|...

Caucho Resin 3.0.173.0.18 - Viewfile Information Disclosure

Caucho Resin 3.0.173.0.18 - Viewfile Information Disclosure source: https://www.securityfocus.com/bid/18007/info Resin is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

Web-APP.net WebAPP 0.9.x - index.cgi Multiple Cross-Site Scripting Vulnerabilities

Web-APP.net WebAPP 0.9.x - index.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17359/info Web-App.Org and Web-App.Net are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An...