CVE-2007-3242 The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute arbitrary commands vi...
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the titles of items in a personal menu.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-app.net webapp | = 0.9.9.3.3 | No fix listed |
| web-app.net webapp | = 0.9.9.3.4 | No fix listed |
| web-app.net webapp | = 0.9.9.4 | No fix listed |
| web-app.net webapp | = 0.9.9.5 | No fix listed |
| web-app.net webapp | = 0.9.9.6 | No fix listed |
| web-app.net webapp | = 0.9.9.7 | No fix listed |
| web-app.net webapp | = 0.9.9.8 | No fix listed |
| web-app.org webapp | All versions | No fix listed |
References
- 20070627 Web-APP.org feedback on CVE-2007-3242 mailing-list
- 20070612 Menu Manager Mod for WebAPP - No Input Filtering mailing-list
- 20070618 Re: Menu Manager Mod for WebAPP - No Input Filtering mailing-list
- 24453 vdb-entry
- www.web-app.net
- webapp-menu-command-execution(34845) vdb-entry