CVE-2007-1178

2007-02-2816:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

JSON

WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.

References

osvdb.org/33279

osvdb.org/33282

secunia.com/advisories/24080

www.securityfocus.com/bid/22563

www.vupen.com/english/advisories/2007/0604

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250