Vulnerability Details CVE-2007-1827
Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.8%
CVSS Severity
CVSS v2 Score 6.0
References
- http://osvdb.org/45396
- http://secunia.com/advisories/24227
- http://www.attrition.org/pipermail/vim/2007-March/001455.html
- http://www.vupen.com/english/advisories/2007/0720
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=252
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=254
- http://osvdb.org/45396
- http://secunia.com/advisories/24227
- http://www.attrition.org/pipermail/vim/2007-March/001455.html
- http://www.vupen.com/english/advisories/2007/0720
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=252
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=254
Products affected by CVE-2007-1827
-
cpe:2.3:a:web-app.org:webapp:0.9.9
-
cpe:2.3:a:web-app.org:webapp:0.9.9.1
-
cpe:2.3:a:web-app.org:webapp:0.9.9.2
-
cpe:2.3:a:web-app.org:webapp:0.9.9.2.1
-
cpe:2.3:a:web-app.org:webapp:0.9.9.3
-
cpe:2.3:a:web-app.org:webapp:0.9.9.3.1
-
cpe:2.3:a:web-app.org:webapp:0.9.9.3.2
-
cpe:2.3:a:web-app.org:webapp:0.9.9.3.3
-
cpe:2.3:a:web-app.org:webapp:0.9.9.3.4
-
cpe:2.3:a:web-app.org:webapp:0.9.9.3.5
-
cpe:2.3:a:web-app.org:webapp:0.9.9.4
-
cpe:2.3:a:web-app.org:webapp:0.9.9.5