Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2007-1188
cve-2007-1188
webapp
remote attackers
search form hijacking
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.3%
WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to “search form hijacking”.
Affected configurations
Node
web-app.orgwebappMatch0.9.9
ORweb-app.orgwebappMatch0.9.9.1
ORweb-app.orgwebappMatch0.9.9.2
ORweb-app.orgwebappMatch0.9.9.2.1
ORweb-app.orgwebappMatch0.9.9.3
ORweb-app.orgwebappMatch0.9.9.3.1
ORweb-app.orgwebappMatch0.9.9.3.2
ORweb-app.orgwebappMatch0.9.9.4
Related
prion
prion
Design/Logic Flaw
2007-03-02 21:18:00
nvd
nvd
CVE-2007-1188
2007-03-02 21:18:00
cvelist
cvelist
CVE-2007-1188
2007-02-28 16:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.3%
Related for CVE-2007-1188