CVE Vulnerability

CVE-2007-3416

Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip Patch
http://www.attrition.org/pipermail/vim/2007-June/001687.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/35929
Configurations

Configuration 1

cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:*
cpe:2.3:a:web_app.net:webapp:0.9.9.3.4:*:*:*:*:*:*:*
cpe:2.3:a:web_app.net:webapp:2007:*:*:*:*:*:*:*
cpe:2.3:a:web_app.net:webapp:0.9.9.3.3:*:*:*:*:*:*:*
Information

Published : 2007-06-26 11:30

Updated : 2017-07-29 01:32

NVD link : CVE-2007-3416

Mitre link : CVE-2007-3416

Products Affected
No products.
CWE
CWE-352