CVE-2007-3418 The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authentica...
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authenticated users to impersonate other users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-app.org webapp | <= 0.9.9.6 | No fix listed |
References
- 45399 vdb-entry
- www.web-app.org
- www.web-app.org patch