Design/Logic Flaw

2007-03-0221:18:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

JSON

WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.

CPENameOperatorVersion
webapple0.9.9.4

CPE	Name	Operator	Version
	webapp	le	0.9.9.4

References

osvdb.org/33279

osvdb.org/33282

secunia.com/advisories/24080

www.securityfocus.com/bid/22563

www.vupen.com/english/advisories/2007/0604

www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250