PT-2007-2883 · Webapp · Webapp

Monty53 · Published 2007-03-16 · Updated 2008-11-23 · CVE-2007-1489

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebAPP versions 0.9.9.4 through 0.9.9.6

Description The issue allows remote attackers to obtain admin access by modifying cookies and performing certain consecutive actions, possibly due to a cross-site request forgery (CSRF) vulnerability.

Recommendations For versions 0.9.9.4 through 0.9.9.6, update to a version that fixes the issue, as the current version allows for potential admin access exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2007-1489

Affected Products

Webapp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-1489 · Security Note
• http://secunia.com/advisories/24540 · Vendor Advisory
• http://web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=crip&id=2 · Patch
• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=256 · Note
• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=259 · Note
• http://attrition.org/pipermail/vim/2007-March/001446.html · Note
• http://osvdb.org/33273 · Note