About Us | Contact Us

 


 

VUPEN Free Resources

 
  VUPEN Security Advisories
 
  VUPEN Security Blog & News
  Zero-day Attacks Monitor
  Daily Security Mailinglist
  Explanation of Terms
  Advanced Search Engine
 
   

WebAPP.org Multiple Parameter Cross Site Scripting and Security Bypass Vulnerabilities

VUPEN ID VUPEN/ADV-2007-0604
CVE ID CVE-2007-1175 - CVE-2007-1176 - CVE-2007-1177 - CVE-2007-1178 - CVE-2007-1179 - CVE-2007-1180 - CVE-2007-1181 - CVE-2007-1182 - CVE-2007-1183 - CVE-2007-1184 - CVE-2007-1185 - CVE-2007-1186 - CVE-2007-1187 - CVE-2007-1188
 
CWE ID Available in VUPEN VNS Customer Area
CVSS V2 Available in VUPEN VNS Customer Area
Rated as Low Risk 
Impact Available in VUPEN VNS Customer Area
Authentication Level Available in VUPEN VNS Customer Area
Access Vector Available in VUPEN VNS Customer Area
Release Date 2007-02-14
Share Twitter LinkedIn Facebook Delicious Digg Slashdot

Technical Description

Multiple vulnerabilities have been identified in WebAPP.org, which may be exploited by attackers to execute arbitrary scripting code or bypass security restrictions. These issues are due to input validation errors in various scripts when processing specially crafted parameters or data, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.

Various other security issues have been reported.

Affected Products

WebAPP.org versions prior to 0.9.9.5

Solution 

Upgrade to WebAPP.org version 0.9.9.5 :
http://www.web-app.org/cgi-bin/index.cgi?action=downloads

References

http://www.vupen.com/english/advisories/2007/0604
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=249

Credits 

Vulnerabilities reported by the vendor

Changelog 

2007-02-14 : Initial release

Feedback 

If you have additional information or corrections for this security advisory please submit them via our contact form.

 

Monthly Statistics 

 

 VUPEN Security Advisories By Criticality: Sep 2010


  Critical Risk

: 21%

  High Risk
: 2%

  Moderate Risk
: 51%

  Low Risk
: 26%

Get a real-time view of the vulnerabilities affecting your systems using the VUPEN VNS reporting capabilities.
 

 

Try VUPEN VNS 

 

 





© 2004-2010 VUPEN Security - Copyright - Privacy Policy