web-app.org webapp 0.9.9.2 vulnerabilities and exploits

(subscribe to this query)

Unknown vulnerability in subs.pl for WebAPP 0.9.9 up to and including 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences.

Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.1

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote malicious users to execute arbitrary commands via shell metacharacters in the f parameter.

Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9

2 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter i...

Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1

2 EDB exploits

WebAPP prior to 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact.

Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1

The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP prior to 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.

Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2

WebAPP prior to 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-s...

Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3

WebAPP prior to 0.9.9.5 allows remote malicious users to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking".

Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4

WebAPP prior to 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors.

Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2

The default configuration of WebAPP prior to 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data.

Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1

WebAPP prior to 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact.

Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook