PT-2007-2883 · Webapp · Webapp

Monty53 · Publicado 2007-03-16 · Atualizado 2008-11-23 · CVE-2007-1489

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebAPP versions 0.9.9.4 through 0.9.9.6

Description The issue allows remote attackers to obtain admin access by modifying cookies and performing certain consecutive actions, possibly due to a cross-site request forgery (CSRF) vulnerability.

Recommendations For versions 0.9.9.4 through 0.9.9.6, update to a version that fixes the issue, as the current version allows for potential admin access exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2007-1489

Produtos afetados

Webapp

Referências · 7

• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=256 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1489 · Nota de Segurança
• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=259 · Nota
• http://secunia.com/advisories/24540 · Aviso do Fabricante
• http://attrition.org/pipermail/vim/2007-March/001446.html · Nota
• http://osvdb.org/33273 · Nota
• http://web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2 · Correção