CVE

Id
24535  
CVE No.
CVE-2007-1178  
Status
Candidate  
Description
WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.  
Phase
Assigned (20070228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
241876 24535 CVE-2007-1178 CONFIRM:http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250  View
241877 24535 CVE-2007-1178 BID:22563  View
241878 24535 CVE-2007-1178 URL:http://www.securityfocus.com/bid/22563  View
241879 24535 CVE-2007-1178 VUPEN:ADV-2007-0604  View
241880 24535 CVE-2007-1178 URL:http://www.vupen.com/english/advisories/2007/0604  View
241881 24535 CVE-2007-1178 OSVDB:33279  View
241882 24535 CVE-2007-1178 URL:http://osvdb.org/33279  View
241883 24535 CVE-2007-1178 OSVDB:33282  View
241884 24535 CVE-2007-1178 URL:http://osvdb.org/33282  View
241885 24535 CVE-2007-1178 SECUNIA:24080  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56487 JVNDB-2007-005179 WebAPP におけるクロスサイトリクエストフォージェリ攻撃を仕掛けられる脆弱性 WebAPP は、特定のフォーム内で適切にリファラをチェックしないため、クロスサイトリクエストフォージェリ攻撃を仕掛けられる、またはその他の影響を受ける脆弱性が存在します。 CVE-2007-1180 24535 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005179.html  View