MitreCVE-2007-3242CVE-2007-3242
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
87.4%
The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the titles of items in a personal menu.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| web-app.net | webapp | 0.9.9.3.3 | cpe:2.3:a:web-app.net:webapp:0.9.9.3.3:*:*:*:*:*:*:* |
| web-app.net | webapp | 0.9.9.3.4 | cpe:2.3:a:web-app.net:webapp:0.9.9.3.4:*:*:*:*:*:*:* |
| web-app.net | webapp | 0.9.9.4 | cpe:2.3:a:web-app.net:webapp:0.9.9.4:*:*:*:*:*:*:* |
| web-app.net | webapp | 0.9.9.5 | cpe:2.3:a:web-app.net:webapp:0.9.9.5:*:*:*:*:*:*:* |
| web-app.net | webapp | 0.9.9.6 | cpe:2.3:a:web-app.net:webapp:0.9.9.6:*:*:*:*:*:*:* |
| web-app.net | webapp | 0.9.9.7 | cpe:2.3:a:web-app.net:webapp:0.9.9.7:*:*:*:*:*:*:* |
| web-app.net | webapp | 0.9.9.8 | cpe:2.3:a:web-app.net:webapp:0.9.9.8:*:*:*:*:*:*:* |
| web-app.org | webapp | * | cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:* |
References
www.attrition.org/pipermail/vim/2007-June/001686.html
www.securityfocus.com/archive/1/471213/100/0/threaded
www.securityfocus.com/archive/1/471638/100/100/threaded
www.securityfocus.com/bid/24453
www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=security&id=3
exchange.xforce.ibmcloud.com/vulnerabilities/34845
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
87.4%