web-app.org webapp 0.9.9.2.1 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote malicious users to execute arbitrary commands via shell metacharacters in the f parameter.

Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9

2 EDB exploits

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter i...

Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1

2 EDB exploits

5.8

CVSSv2

WebAPP prior to 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-s...

Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3

5

CVSSv2

WebAPP prior to 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors.

Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2

5

CVSSv2

The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP prior to 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.

Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2

5.5

CVSSv2

WebAPP prior to 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches.

Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1

6.4

CVSSv2

WebAPP prior to 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact.

Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1

5

CVSSv2

The default configuration of WebAPP prior to 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data.

Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1

5

CVSSv2

WebAPP prior to 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact.

Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1

7.5

CVSSv2

WebAPP prior to 0.9.9.5 allows remote malicious users to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking".

Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook