Approved changes feed: RSS · Atom

cpe:2.3:a:web-app.org:webapp:0.9.9.4:*:*:*:*:*:*:*

part: a version: 0.9.9.4 update: *

VendorWeb App.Org (41cff7d2-55c4-5bfb-a84c-43997388f9a1)
ProductWebapp (250db7b5-46ce-5abb-9568-2b29a8efdf69)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1828 vulnerable 2026-06-08 04:49:43.554121 Details available
Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the QUERY_STRING corresponding to drop downs or (2) various forms.
Published: 2007-04-03T00:00:00.000Z
Updated: 2024-08-07T13:13:40.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1827 vulnerable 2026-06-08 04:49:43.552121 Details available
Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters."
Published: 2007-04-03T00:00:00.000Z
Updated: 2024-08-07T13:13:40.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1489 vulnerable 2026-06-08 04:49:42.705890 Details available
Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery (CSRF) vulnerability.
Published: 2007-03-16T21:00:00.000Z
Updated: 2024-08-07T12:59:08.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1259 vulnerable 2026-06-08 04:49:41.881697 Details available
Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors.
Published: 2007-03-03T20:00:00.000Z
Updated: 2024-08-07T12:50:35.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1188 vulnerable 2026-06-08 04:49:41.597221 Details available
WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking".
Published: 2007-02-28T16:00:00.000Z
Updated: 2024-08-07T12:50:33.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1187 vulnerable 2026-06-08 04:49:41.596758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1186 vulnerable 2026-06-08 04:49:41.596280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1185 vulnerable 2026-06-08 04:49:41.595722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1184 vulnerable 2026-06-08 04:49:41.595293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1182 vulnerable 2026-06-08 04:49:41.594412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1181 vulnerable 2026-06-08 04:49:41.593964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1177 vulnerable 2026-06-08 04:49:41.592253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.