CVE-2007-1185 The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-app.org webapp | = 0.9.9 | No fix listed |
| web-app.org webapp | = 0.9.9.1 | No fix listed |
| web-app.org webapp | = 0.9.9.2 | No fix listed |
| web-app.org webapp | = 0.9.9.2.1 | No fix listed |
| web-app.org webapp | = 0.9.9.3 | No fix listed |
| web-app.org webapp | = 0.9.9.3.1 | No fix listed |
| web-app.org webapp | = 0.9.9.3.2 | No fix listed |
| web-app.org webapp | = 0.9.9.4 | No fix listed |
References
- 33295 vdb-entry
- 24080 third-party-advisory vendor-advisory
- 22563 patch vdb-entry vendor-advisory
- ADV-2007-0604 vdb-entry
- www.web-app.org