Approved changes feed: RSS · Atom
cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Web App.Org (41cff7d2-55c4-5bfb-a84c-43997388f9a1) |
|---|---|
| Product | Webapp (250db7b5-46ce-5abb-9568-2b29a8efdf69) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3424 |
vulnerable | 2026-06-08 04:49:53.995873 |
Details available
The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors.
Published: 2007-06-26T23:00:00.000Z
Updated: 2024-08-07T14:14:13.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3423 |
vulnerable | 2026-06-08 04:49:53.995621 |
Details available
cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .dat file name when the (1) imview2 or (2) imview3 function reads (a) an internal IM, or a message from a (b) guest or (c) removed member, which has unknown impact and remote attack vectors.
Published: 2007-06-26T23:00:00.000Z
Updated: 2024-08-07T14:14:12.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3422 |
vulnerable | 2026-06-08 04:49:53.995353 |
Details available
The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that contain (1) non-printing characters, (2) certain printing characters that do not commonly occur in URLs, or (3) invalid URL encoding sequences, which has unknown impact and remote attack vectors.
Published: 2007-06-26T23:00:00.000Z
Updated: 2024-08-07T14:14:13.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3421 |
vulnerable | 2026-06-08 04:49:53.995075 |
Details available
The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6) gallery view, (7) gallery comment, and (8) gallery feedback capabilities in web-app.org WebAPP before 0.9.9.7 do not verify presence of users in memberlist.dat, which has unknown impact and remote attack vectors.
Published: 2007-06-26T23:00:00.000Z
Updated: 2024-08-07T14:14:13.262Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3420 |
vulnerable | 2026-06-08 04:49:53.994818 |
Details available
The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not clear the (1) username, (2) password, (3) usertheme, and (4) userlang cookies for unauthorized users, which has unknown impact and remote attack vectors.
Published: 2007-06-26T23:00:00.000Z
Updated: 2024-08-07T14:14:12.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3419 |
vulnerable | 2026-06-08 04:49:53.994559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3418 |
vulnerable | 2026-06-08 04:49:53.994280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3417 |
vulnerable | 2026-06-08 04:49:53.993978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3416 |
vulnerable | 2026-06-08 04:49:53.991529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3242 |
vulnerable | 2026-06-08 04:49:53.514193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1832 |
vulnerable | 2026-06-08 04:49:43.557038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1831 |
vulnerable | 2026-06-08 04:49:43.556729 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1183 |
vulnerable | 2026-06-08 04:49:41.594717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1180 |
vulnerable | 2026-06-08 04:49:41.593396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1179 |
vulnerable | 2026-06-08 04:49:41.593089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1178 |
vulnerable | 2026-06-08 04:49:41.592754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1176 |
vulnerable | 2026-06-08 04:49:41.586181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1175 |
vulnerable | 2026-06-08 04:49:41.585773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1174 |
vulnerable | 2026-06-08 04:49:41.585389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.