web-app.org webapp vulnerabilities and exploits

(subscribe to this query)

6

CVSSv2

Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP prior to 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters."

Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.5 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.3.4 Web-app.org Webapp 0.9.9.3.5 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.3.3 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1

3.5

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP prior to 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the QUERY_STRING corresponding to drop downs or (2) various forms.

Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.3.3 Web-app.org Webapp 0.9.9.2.2 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.5 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.3.4 Web-app.org Webapp 0.9.9.3.5

7.5

CVSSv2

Multiple unspecified vulnerabilities in WebAPP prior to 0.9.9.6 have unknown impact and attack vectors.

Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.5 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4

5.8

CVSSv2

WebAPP prior to 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-s...

Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3

6.4

CVSSv2

WebAPP prior to 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact.

Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1

5

CVSSv2

WebAPP prior to 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact.

Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1

7.5

CVSSv2

WebAPP prior to 0.9.9.5 allows remote malicious users to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking".

Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4

5

CVSSv2

WebAPP prior to 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors.

Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2

5

CVSSv2

The default configuration of WebAPP prior to 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data.

Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2 Web-app.org Webapp 0.9.9.2.1

5

CVSSv2

The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP prior to 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.

Web-app.org Webapp 0.9.9.2.1 Web-app.org Webapp 0.9.9.3 Web-app.org Webapp 0.9.9.3.1 Web-app.org Webapp 0.9.9.3.2 Web-app.org Webapp 0.9.9 Web-app.org Webapp 0.9.9.4 Web-app.org Webapp 0.9.9.1 Web-app.org Webapp 0.9.9.2

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook