1. CVE-Search
  2. CVE-2007-1188
ID CVE-2007-1188
Summary WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking".
References
Vulnerable Configurations
  • cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:web-app.org:webapp:0.9.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:web-app.org:webapp:0.9.9.4:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 08-03-2011 - 02:51)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 22563
confirm http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
osvdb 33299
secunia 24080
vupen ADV-2007-0604
Last major update 08-03-2011 - 02:51
Published 02-03-2007 - 21:18
Last modified 08-03-2011 - 02:51
Back to Top