CVE-2007-3424 The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact a...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-app.org webapp | <= 0.9.9.6 | No fix listed |
References
- 45410 vdb-entry
- www.web-app.org
- www.web-app.org patch