{"api_version":"1","generated_at":"2026-07-23T06:07:52+00:00","cve":"CVE-2007-3419","urls":{"html":"https://cve.report/CVE-2007-3419","api":"https://cve.report/api/cve/CVE-2007-3419.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-3419","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-3419"},"summary":{"title":"CVE-2007-3419","description":"The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-06-26 23:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip","name":"http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"PremiumSale.com  Premium Domains","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://osvdb.org/45400","name":"http://osvdb.org/45400","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458","name":"http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3419","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3419","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"3419","vulnerable":"1","versionEndIncluding":"0.9.9.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"web-app.org","cpe5":"webapp","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:14:12.945Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458"},{"name":"45400","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/45400"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-03-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2008-11-15T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458"},{"name":"45400","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/45400"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-3419","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip","refsource":"CONFIRM","url":"http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip"},{"name":"http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458","refsource":"CONFIRM","url":"http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458"},{"name":"45400","refsource":"OSVDB","url":"http://osvdb.org/45400"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-3419","datePublished":"2007-06-26T23:00:00.000Z","dateReserved":"2007-06-26T00:00:00.000Z","dateUpdated":"2024-08-07T14:14:12.945Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-06-26 23:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.9.6","matchCriteriaId":"148D57A7-D6B9-41A5-8B65-DCE7072E1C31"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"3419","Ordinal":"1","Title":"CVE-2007-3419","CVE":"CVE-2007-3419","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"3419","Ordinal":"1","NoteData":"The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.","Type":"Description","Title":"CVE-2007-3419"},{"CveYear":"2007","CveId":"3419","Ordinal":"2","NoteData":"2007-06-26","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"3419","Ordinal":"3","NoteData":"2008-11-15","Type":"Other","Title":"Modified"}]}}}