{"api_version":"1","generated_at":"2026-07-23T06:04:50+00:00","cve":"CVE-2007-1176","urls":{"html":"https://cve.report/CVE-2007-1176","api":"https://cve.report/api/cve/CVE-2007-1176.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-1176","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-1176"},"summary":{"title":"CVE-2007-1176","description":"Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages, (2) Feedback pages, (3) Search Results pages, and (4) the Statistics Log viewer.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-03-02 21:18:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://osvdb.org/33290","name":"http://osvdb.org/33290","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32526","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32526","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/33276","name":"http://osvdb.org/33276","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32499","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32499","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32498","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32498","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/24080","name":"http://secunia.com/advisories/24080","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"web-app.org WebAPP Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0604","name":"http://www.vupen.com/english/advisories/2007/0604","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22563","name":"http://www.securityfocus.com/bid/22563","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webapp.Org Webapp Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250","name":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Web-APP.org Articles : Announcements : WebAPP version 0.9.9.5 Early Release - WebAPP Web Automated Perl Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/33289","name":"http://osvdb.org/33289","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://osvdb.org/33288","name":"http://osvdb.org/33288","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1176","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1176","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"1176","vulnerable":"1","versionEndIncluding":"0.9.9.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"web-app.org","cpe5":"webapp","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:43:22.639Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33290","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33290"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250"},{"name":"ADV-2007-0604","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0604"},{"name":"33276","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33276"},{"name":"24080","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/24080"},{"name":"33289","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33289"},{"name":"33288","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/33288"},{"name":"webapp-searchresultspages-xss(32499)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32499"},{"name":"webapp-statisticslogviewer-xss(32498)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32498"},{"name":"22563","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22563"},{"name":"webapp-gallery-feedback-xss(32526)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32526"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-02-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages, (2) Feedback pages, (3) Search Results pages, and (4) the Statistics Log viewer."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"33290","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33290"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250"},{"name":"ADV-2007-0604","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0604"},{"name":"33276","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33276"},{"name":"24080","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/24080"},{"name":"33289","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33289"},{"name":"33288","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/33288"},{"name":"webapp-searchresultspages-xss(32499)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32499"},{"name":"webapp-statisticslogviewer-xss(32498)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32498"},{"name":"22563","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22563"},{"name":"webapp-gallery-feedback-xss(32526)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32526"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-1176","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages, (2) Feedback pages, (3) Search Results pages, and (4) the Statistics Log viewer."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33290","refsource":"OSVDB","url":"http://osvdb.org/33290"},{"name":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250","refsource":"CONFIRM","url":"http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250"},{"name":"ADV-2007-0604","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0604"},{"name":"33276","refsource":"OSVDB","url":"http://osvdb.org/33276"},{"name":"24080","refsource":"SECUNIA","url":"http://secunia.com/advisories/24080"},{"name":"33289","refsource":"OSVDB","url":"http://osvdb.org/33289"},{"name":"33288","refsource":"OSVDB","url":"http://osvdb.org/33288"},{"name":"webapp-searchresultspages-xss(32499)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32499"},{"name":"webapp-statisticslogviewer-xss(32498)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32498"},{"name":"22563","refsource":"BID","url":"http://www.securityfocus.com/bid/22563"},{"name":"webapp-gallery-feedback-xss(32526)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32526"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-1176","datePublished":"2007-02-28T16:00:00.000Z","dateReserved":"2007-02-28T00:00:00.000Z","dateUpdated":"2024-08-07T12:43:22.639Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-03-02 21:18:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.9.4","matchCriteriaId":"4053C685-A96A-43B3-8D78-E185AD837B5D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"1176","Ordinal":"1","Title":"CVE-2007-1176","CVE":"CVE-2007-1176","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"1176","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages, (2) Feedback pages, (3) Search Results pages, and (4) the Statistics Log viewer.","Type":"Description","Title":"CVE-2007-1176"},{"CveYear":"2007","CveId":"1176","Ordinal":"2","NoteData":"2007-02-28","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"1176","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}