CVE-2007-1489

Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery (CSRF) vulnerability.

Link	Resource
http://www.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2	Patch
http://secunia.com/advisories/24540	Vendor Advisory
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=256
http://www.attrition.org/pipermail/vim/2007-March/001446.html
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=259
http://osvdb.org/33273

Configuration 1

cpe:2.3:a:web-app.org:webapp:0.9.9.6:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.5:*:*:*:*:*:*:* cpe:2.3:a:web-app.org:webapp:0.9.9.4:*:*:*:*:*:*:*

---

Published : 2007-03-16 09:19

Updated : 2008-11-23 05:00

---

NVD link : CVE-2007-1489

Mitre link : CVE-2007-1489

No products.

CWE-352

NVD-CWE-noinfo