PT-2007-2611 · Webapp · Webapp

Published 2007-02-28 · Updated 2011-03-08 · CVE-2007-1184

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebAPP versions prior to 0.9.9.5

Description The default configuration of WebAPP has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data.

Recommendations For versions prior to 0.9.9.5, update to version 0.9.9.5 or later to enable CAPTCHA and prevent automated submission of false data.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-1184

Affected Products

Webapp

References · 6

• http://secunia.com/advisories/24080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1184 · Security Note
• http://securityfocus.com/bid/22563 · Patch
• http://osvdb.org/33294 · Note
• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 · Note
• http://vupen.com/english/advisories/2007/0604 · Note