QwikSec

Security Database

CVE

CWE

Training

CVE-2007-3419

Published: Jun 26, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip

x_refsource_CONFIRM

http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458

x_refsource_CONFIRM

vdb-entry

x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.