CVE-2007-1185

The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.

Link	Resource
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
http://www.securityfocus.com/bid/22563	Patch Vendor Advisory
http://secunia.com/advisories/24080	Vendor Advisory
http://osvdb.org/33295
http://www.vupen.com/english/advisories/2007/0604

Configuration 1

cpe:2.3:a:web-app.org:webapp:0.9.9.3:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.3.2:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.2.1:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.3.1:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.4:*:*:*:*:*:*:*

---

Published : 2007-03-02 09:18

Updated : 2011-03-08 02:51

---

NVD link : CVE-2007-1185

Mitre link : CVE-2007-1185

No products.

NVD-CWE-Other