PatchTheCVEweb-app.org vulnerabilities
Recent CVEs affecting web-app.org products. 36 tracked.
web-app.org has 36 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 17. Most recent: 2007-06-26. Highest priority: CVE-2005-1628 (score 55/100).
- CVE-2007-3424 HIGH 7.5 UPGRADE The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat p
- CVE-2007-3423 HIGH 7.5 UPGRADE cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant messa
- CVE-2007-3422 HIGH 7.5 UPGRADE The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query st
- CVE-2007-3421 HIGH 7.5 UPGRADE The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6) gallery view, (7)
- CVE-2007-3420 HIGH 7.5 UPGRADE The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org We
- CVE-2007-3419 HIGH 7.5 UPGRADE The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly ch
- CVE-2007-3418 MEDIUM 6.5 UPGRADE The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not dis
- CVE-2007-3417 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before
- CVE-2007-3416 MEDIUM 5.0 UPGRADE DOWNGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (
- CVE-2007-3242 HIGH 7.5 DOWNGRADE MITIGATE The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org
- CVE-2007-1832 MEDIUM 5.0 UPGRADE web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1) via a crafted
- CVE-2007-1831 MEDIUM 6.0 MITIGATE web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a
- CVE-2007-1830 MEDIUM 4.3 DOWNGRADE Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remot
- CVE-2007-1828 LOW 3.5 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenti
- CVE-2007-1827 MEDIUM 6.0 DOWNGRADE Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remot
- CVE-2007-1489 MEDIUM 6.8 DOWNGRADE Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote a
- CVE-2007-1259 HIGH 7.5 DOWNGRADE Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors.
- CVE-2007-1188 HIGH 7.5 DOWNGRADE WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composit
- CVE-2007-1187 MEDIUM 5.5 DOWNGRADE WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive informa
- CVE-2007-1186 MEDIUM 5.0 DOWNGRADE WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact.
- CVE-2007-1185 MEDIUM 5.0 DOWNGRADE The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidd
- CVE-2007-1184 MEDIUM 5.0 DOWNGRADE The default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for au
- CVE-2007-1183 HIGH 7.5 UPGRADE WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, whic
- CVE-2007-1182 MEDIUM 6.4 DOWNGRADE WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact.
- CVE-2007-1181 MEDIUM 5.0 DOWNGRADE WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which ha
- CVE-2007-1180 MEDIUM 4.3 UPGRADE WebAPP before 0.9.9.5 does not check referrers in certain forms, which might facilitate remote cross-site requ
- CVE-2007-1179 MEDIUM 5.0 UPGRADE WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recomme
- CVE-2007-1178 HIGH 7.5 UPGRADE WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) In
- CVE-2007-1177 MEDIUM 5.8 DOWNGRADE WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string,
- CVE-2007-1176 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject
- CVE-2007-1175 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in an admin feature in WebAPP before 20070209 allows remote attackers
- CVE-2007-1174 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 20070214 allow remote attackers to inject
- CVE-2006-1427 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to
- CVE-2005-1628 HIGH 7.5 DOWNGRADE apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary com
- CVE-2005-0927 HIGH 10.0 DOWNGRADE Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, proba
- CVE-2004-1742 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .
FAQ
How do I fix web-app.org vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web-app.org being exploited right now?
None of the tracked web-app.org CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web-app.org CVE should I patch first?
CVE-2005-1628 currently ranks highest (55/100): apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary com.