Known Vulnerabilities for products from Web-app.org
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Web-app.org".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2007-3424 json | The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a s... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3423 json | cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the begin... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3422 json | The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that cont... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3421 json | The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6) gallery view, (7) gallery commen... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3420 json | The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3419 json | The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) the... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3418 json | The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames ... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3417 json | Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow r... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3416 json | Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and... | Not Provided | 2007-06-26 | 2026-04-23 |
| CVE-2007-3242 json | The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before ... | Not Provided | 2007-06-15 | 2026-04-23 |
| CVE-2007-1832 json | web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1) via a crafted filename or (2)... | Not Provided | 2007-04-03 | 2026-04-23 |
| CVE-2007-1831 json | web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERY_... | Not Provided | 2007-04-03 | 2026-04-23 |
| CVE-2007-1830 json | Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attackers to ... | Not Provided | 2007-04-03 | 2026-04-23 |
| CVE-2007-1828 json | Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to ... | Not Provided | 2007-04-03 | 2026-04-23 |
| CVE-2007-1827 json | Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated... | Not Provided | 2007-04-03 | 2026-04-23 |
| CVE-2007-1489 json | Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obt... | Not Provided | 2007-03-16 | 2026-04-23 |
| CVE-2007-1259 json | Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors. | Not Provided | 2007-03-03 | 2026-04-23 |
| CVE-2007-1188 json | WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) leng... | Not Provided | 2007-03-02 | 2026-04-23 |
| CVE-2007-1187 json | WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) th... | Not Provided | 2007-03-02 | 2026-04-23 |
| CVE-2007-1186 json | WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact. | Not Provided | 2007-03-02 | 2026-04-23 |