Page 7 of 34 results (0.006 seconds)

CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2007-1181

https://notcve.org/view.php?id=CVE-2007-1181

WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors. WebAPP anterior a 0.9.9.5 (1) las informaciones inusitadas y (2) el username a través formularios de Edición del perfil, tiene vectores de impacto desconocidos y vectores de ataque. • http://osvdb.org/33291 http://secunia.com/advisories/24080 http://www.securityfocus.com/bid/22563 http://www.vupen.com/english/advisories/2007/0604 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 •

CVSS: 7.5EPSS: 4%CPEs: 3EXPL: 3

CVE-2005-1628 – WebAPP 0.9.9.2.1 - Remote Command Execution

https://notcve.org/view.php?id=CVE-2005-1628

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. • https://www.exploit-db.com/exploits/1005 https://www.exploit-db.com/exploits/1004 http://www.defacers.com.mx/advisories/3.txt http://www.securityfocus.com/archive/1/449517/100/200/threaded http://www.securityfocus.com/archive/1/449573/100/200/threaded http://www.securityfocus.com/bid/13637 http://www.soulblack.com.ar/repo/tools/sbwebapp.txt http://www.vupen.com/english/advisories/2005/0554 • CWE-20: Improper Input Validation •

CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0

CVE-2005-0927

https://notcve.org/view.php?id=CVE-2005-0927

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences. • http://secunia.com/advisories/14716 http://sourceforge.net/project/shownotes.php?release_id=316038 http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195 •

CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 3

CVE-2004-1742 – Web-APP.Org WebAPP 0.8/0.9.x - Directory Traversal

https://notcve.org/view.php?id=CVE-2004-1742

Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter. • https://www.exploit-db.com/exploits/24408 http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1 http://marc.info/?l=bugtraq&m=109336268002879&w=2 http://secunia.com/advisories/12373 http://www.securityfocus.com/bid/11028 https://exchange.xforce.ibmcloud.com/vulnerabilities/17100 •