PT-2007-1466 · Web App.Net · Web-App.Net Webapp

Published 2007-04-03 · Updated 2008-09-05 · CVE-2006-7188

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions web-app.net WebAPP versions prior to 20060909

Description The issue concerns the search function in the cgi-lib/user-lib/search.pl file, which allows remote attackers to read internal forum posts through specific requests. This might be related to the info{'forum'} variable.

Recommendations For versions prior to 20060909, update to version 20060909 or later to resolve the issue. As a temporary workaround, consider restricting access to the search function in cgi-lib/user-lib/search.pl to minimize the risk of exploitation. Avoid using the info{'forum'} variable in the affected search requests until the issue is resolved.

Fix

Related Identifiers

CVE-2006-7188

Affected Products

Web-App.Net Webapp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-7188 · Security Note
• http://web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=security&id=1 · Patch
• http://web-app.net/cgi-bin/index.cgi?action=redirectd&cat=security&id=1 · Patch