CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2007-1259
https://notcve.org/view.php?id=CVE-2007-1259
Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors. Múltiples vulnerabilidades no especificadas en WebAPP versiones anteriores a 0.9.9.6, presentan un impacto desconocido y vectores de ataque. • http://osvdb.org/33272 http://secunia.com/advisories/24227 http://www.vupen.com/english/advisories/2007/0720 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=252 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=254 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2007-1179
https://notcve.org/view.php?id=CVE-2007-1179
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recommend feature, Email Article (2) senders and (3) recipients, (4) New User Approval, (5) Edit Profiles, (6) the Newsletter Subscription form, (7) the Recommend form, and (8) sending of articles, which has unknown impact, and remote attack vectors related to spam attacks and possibly other attacks. WebAPP anterior a 0.9.9.5 no maneja adecuadamente las direcciones de correo en ciertos contextos relacionados con (1)la característica Recommend, Email Article (2)emisores y (3)receptores, (4) New User Approval, (5) Edit Profiles, (6) el formulario Newsletter Subscription, (7) el formulario Recommend, y (8) envío de artículos, lo cual tiene un impacto desconocido, y vectores de ataque remotos relacionados con ataques de spam y posiblemente otros ataques. • http://osvdb.org/33284 http://secunia.com/advisories/24080 http://www.securityfocus.com/bid/22563 http://www.vupen.com/english/advisories/2007/0604 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2007-1183
https://notcve.org/view.php?id=CVE-2007-1183
WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors. WebAPP anterior a 0.9.9.5 permite a usuarios remotos validados engañar a otros usuarios con nombres reales con espacios en blanco, lo cual tiene un impacto desconocido y vectores de ataque. • http://osvdb.org/33293 http://secunia.com/advisories/24080 http://www.securityfocus.com/bid/22563 http://www.vupen.com/english/advisories/2007/0604 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 •
CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2007-1187
https://notcve.org/view.php?id=CVE-2007-1187
WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches. WebAPP anterior a 0.9.9.5 permite a usuarios validados, sin privilegios de administrador, obtener información sensible a través de la característica Forum Archive y (2) Busquedas recientes. • http://osvdb.org/33281 http://osvdb.org/33298 http://secunia.com/advisories/24080 http://www.securityfocus.com/bid/22563 http://www.vupen.com/english/advisories/2007/0604 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 •
CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0CVE-2007-1185
https://notcve.org/view.php?id=CVE-2007-1185
The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors. Los formularios de (1) Search, (2) Edit de Perfil,(3) Recommend, y (4) User Approval en WebAPP anterior a 0.9.9.5 utilizan enrtadas oculta, lo cual tiene un impacto desconocido y vectores de ataque remotos. • http://osvdb.org/33295 http://secunia.com/advisories/24080 http://www.securityfocus.com/bid/22563 http://www.vupen.com/english/advisories/2007/0604 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 •