Lucene search

[email protected]CVE-2007-1827

HistoryApr 03, 2007 - 12:19 a.m.

CVE-2007-1827

2007-04-0300:19:00

[email protected]

web.nvd.nist.gov

cve-2007-1827

webapp

input validation

data corruption

remote access

arbitrary code execution

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.3%

JSON

Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via “certain characters.”

Affected configurations

NVD

Node

web-app.orgwebappMatch0.9.9

web-app.orgwebappMatch0.9.9.1

web-app.orgwebappMatch0.9.9.2

web-app.orgwebappMatch0.9.9.2.1

web-app.orgwebappMatch0.9.9.3

web-app.orgwebappMatch0.9.9.3.1

web-app.orgwebappMatch0.9.9.3.2

web-app.orgwebappMatch0.9.9.3.3

web-app.orgwebappMatch0.9.9.3.4

web-app.orgwebappMatch0.9.9.3.5

web-app.orgwebappMatch0.9.9.4

web-app.orgwebappMatch0.9.9.5

CPENameOperatorVersion
web-app.org:webappweb-app.org webappeq0.9.9
web-app.org:webappweb-app.org webappeq0.9.9.1
web-app.org:webappweb-app.org webappeq0.9.9.2
web-app.org:webappweb-app.org webappeq0.9.9.2.1
web-app.org:webappweb-app.org webappeq0.9.9.3
web-app.org:webappweb-app.org webappeq0.9.9.3.1
web-app.org:webappweb-app.org webappeq0.9.9.3.2
web-app.org:webappweb-app.org webappeq0.9.9.3.3
web-app.org:webappweb-app.org webappeq0.9.9.3.4
web-app.org:webappweb-app.org webappeq0.9.9.3.5

CPE	Name	Operator	Version
web-app.org:webapp	web-app.org webapp	eq	0.9.9
web-app.org:webapp	web-app.org webapp	eq	0.9.9.1
web-app.org:webapp	web-app.org webapp	eq	0.9.9.2
web-app.org:webapp	web-app.org webapp	eq	0.9.9.2.1
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.1
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.2
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.3
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.4
web-app.org:webapp	web-app.org webapp	eq	0.9.9.3.5

Rows per page:

1-10 of 121

References

osvdb.org/45396

secunia.com/advisories/24227

www.attrition.org/pipermail/vim/2007-March/001455.html

www.vupen.com/english/advisories/2007/0720

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=252

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=254

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.3%

JSON

Related for CVE-2007-1827

prion1 cvelist1 nvd1 securityvulns1