WebAPP Unspecified File Disclosure Vulnerability

Bugtraq ID:	12938
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 29 2005 12:00AM
Updated:	Mar 29 2005 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	WebAPP WebAPP 0.9.9 .2 WebAPP WebAPP 0.9.9
Not Vulnerable:

WebAPP Unspecified File Disclosure Vulnerability

WebAPP is reported prone to an unspecified file disclosure vulnerability.

It is reported that this issue may allow remote attackers to disclose contents of certain files. Information gathered through a successful attack may aid in other attacks against a vulnerable computer.

All versions of WebAPP are considered vulnerable to this issue.

This BID will be updated when more information is available.

WebAPP Unspecified File Disclosure Vulnerability

An exploit is not required.

WebAPP Unspecified File Disclosure Vulnerability

Solution:
The vendor has released a patch to address this issue. More information about obtaining and applying the patch are available at the following location:

http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195

WebAPP Unspecified File Disclosure Vulnerability

References:

• Web-app.org WebAPP Home Page (Web-app.org)