CVE-2007-1489 Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive a...
MediumCVSS 6.8
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery (CSRF) vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-app.org webapp | = 0.9.9.4 | No fix listed |
| web-app.org webapp | = 0.9.9.5 | No fix listed |
| web-app.org webapp | = 0.9.9.6 | No fix listed |
References
- 33273 vdb-entry
- 24540 third-party-advisory vendor-advisory
- 20070320 WebAPP Audit mailing-list
- www.web-app.org patch
- www.web-app.org
- www.web-app.org