İçeriğe atla
Noroxi

web-app.org kayıtları

web-app.org üreticisine ait 36 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    36 kayıt
    • CVE-2005-0927
      40Planlayın

      Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharac

      KritikCVSS 10,0İstismar yokEPSS %2

      web-app.org · webapp2 May 2005

    • CVE-2005-1628
      33İzleyin

      apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters

      YüksekCVSS 7,5Kavram kanıtıEPSS %11

      web-app.org · webapp17 May 2005

    • CVE-2007-3242
      31İzleyin

      The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows

      YüksekCVSS 7,5İstismar yokEPSS %2

      web-app.net · webapp14 Haz 2007

    • CVE-2007-1188
      30İzleyin

      WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has u

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1183
      30İzleyin

      WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attac

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1178
      30İzleyin

      WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration,

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1259
      30İzleyin

      Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors.

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp3 Mar 2007

    • CVE-2007-3424
      30İzleyin

      The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory nam

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-3419
      30İzleyin

      The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) la

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-3420
      30İzleyin

      The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not c

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-3421
      30İzleyin

      The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6) gallery view, (7) gallery comment, and (8) gall

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-3422
      30İzleyin

      The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that contain (1) non-pri

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-3423
      30İzleyin

      cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .da

      YüksekCVSS 7,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-1489
      27İzleyin

      Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin acces

      OrtaCVSS 6,8İstismar yokEPSS %1

      web-app.org · webapp16 Mar 2007

    • CVE-2007-3418
      26İzleyin

      The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction

      OrtaCVSS 6,5İstismar yokEPSS %1

      web-app.org · webapp26 Haz 2007

    • CVE-2007-1827
      25İzleyin

      Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corru

      OrtaCVSS 6,0İstismar yokEPSS %2

      web-app.org · webapp2 Nis 2007

    • CVE-2007-1182
      25İzleyin

      WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact.

      OrtaCVSS 6,4İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1831
      24İzleyin

      web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERY_STRING.

      OrtaCVSS 6,0İstismar yokEPSS %1

      web-app.org · webapp2 Nis 2007

    • CVE-2007-1177
      23İzleyin

      WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum P

      OrtaCVSS 5,8İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2004-1742
      22İzleyin

      Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a ..

      OrtaCVSS 5,0Kavram kanıtıEPSS %7

      web-app.org · webapp24 Ağu 2004

    • CVE-2007-1187
      22İzleyin

      WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive

      OrtaCVSS 5,5İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1832
      20İzleyin

      web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1) via a crafted filename or (2) by "using perc

      OrtaCVSS 5,0İstismar yokEPSS %1

      web-app.org · webapp2 Nis 2007

    • CVE-2007-1181
      20İzleyin

      WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack ve

      OrtaCVSS 5,0İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1186
      20İzleyin

      WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact.

      OrtaCVSS 5,0İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007

    • CVE-2007-1185
      20İzleyin

      The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown i

      OrtaCVSS 5,0İstismar yokEPSS %1

      web-app.org · webapp2 Mar 2007