PT-2007-2606 · Webapp · Webapp

Published 2007-02-28 · Updated 2011-03-08 · CVE-2007-1179

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebAPP versions prior to 0.9.9.5

Description The issue is related to the improper management of e-mail addresses in various contexts, including the Recommend feature, Email Article senders and recipients, New User Approval, Edit Profiles, the Newsletter Subscription form, the Recommend form, and the sending of articles. This has an unknown impact and is related to remote attack vectors, such as spam attacks and possibly other types of attacks.

Recommendations For versions prior to 0.9.9.5, update to version 0.9.9.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-1179

Affected Products

Webapp

References · 6

• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1179 · Security Note
• http://secunia.com/advisories/24080 · Note
• http://osvdb.org/33284 · Note
• http://securityfocus.com/bid/22563 · Note
• http://vupen.com/english/advisories/2007/0604 · Note