PT-2007-2606 · Webapp · Webapp

Publicado 2007-02-28 · Atualizado 2011-03-08 · CVE-2007-1179

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebAPP versions prior to 0.9.9.5

Description The issue is related to the improper management of e-mail addresses in various contexts, including the Recommend feature, Email Article senders and recipients, New User Approval, Edit Profiles, the Newsletter Subscription form, the Recommend form, and the sending of articles. This has an unknown impact and is related to remote attack vectors, such as spam attacks and possibly other types of attacks.

Recommendations For versions prior to 0.9.9.5, update to version 0.9.9.5 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-1179

Produtos afetados

Webapp

Referências · 6

• http://secunia.com/advisories/24080 · Nota
• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1179 · Nota de Segurança
• http://osvdb.org/33284 · Nota
• http://securityfocus.com/bid/22563 · Nota
• http://vupen.com/english/advisories/2007/0604 · Nota