CVE-2007-3242

The CVE-2007-3242 entry concerns the Menu Manager Mod for WebAPP WebAPP NE (versions 0.9.9.3.3–0.9.9.8) and WebAPP.org WebAPP before 0.9.9.6. The vulnerability allows remote authenticated users to execute arbitrary commands by injecting shell metacharacters into the titles of items in a personal ...

CVE-2006-7188

The CVE-2006-7188 entry concerns WebAPP by web-app.net. Affected component: the search.pl in cgi-lib/user-lib. Before 20060909, remote attackers could read internal forum posts by crafting certain requests, with the issue possibly tied to the $info{'forum'} variable. The provided sources confirm ...

CVE-2006-7189

CVE-2006-7189 describes a cross-site scripting (XSS) vulnerability in the web-app.net WebAPP product, specifically in the shell path CGI-bin/admin/logs.cgi, prior to version 20060403. The flaw allows remote attackers to inject arbitrary web script or HTML through unspecified vectors related to th...

CVE-2006-7190

CVE-2006-7190 describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/user-lib/topics.pl component of WebAPP (web-app.net) prior to 20060515. The issue allows remote attackers to inject arbitrary web scripts or HTML through unknown vectors in the viewnews function, with the root cause...

CVE-2006-6687

CVE-2006-6687 describes a cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry notes a net...

CVE-2006-6688

Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET) are identified as vulnerable to bypassing filtering mechanisms by remote attackers via unknown vectors. The CVSS data indicates NETWORK attack vector, low complexity, no authentication required, with pa...

CVE-2006-7186

The CVE-2006-7186 entry concerns WebAPP (WebAPP) CGI component cgi-lib/subs.pl, affected in versions before 0.9.9.3.5. The vulnerability enables attackers to open list files in the profile and other functions, per the description, and is noted as distinct from CVE-2005-0927. No remediation steps ...

CVE-2006-7187

The CVE-2006-7187 entry documents a Cross-site scripting (XSS) vulnerability in the WebAPP product where the show_recent_searches function (cgi-lib/user-lib/search.pl) accepts user-controlled input via the srch parameter. Affects WebAPP prior to 2006-09-09; exploitable by remote attackers to inje...

CVE-2007-1829

Technical details for CVE-2007-1829 are not publicly available in the provided documents. Monitor for updates from official advisories; the materials here do not specify affected products, impact, vectors, or mitigations.