National Cyber Awareness System

Vulnerability Summary for CVE-2007-1177

Overview

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting (XSS).

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 22563

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/22563

External Source: SECUNIA

Name: 24080

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/24080

External Source: CONFIRM

Name: http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250

Hyperlink:http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250

External Source: VUPEN

Name: ADV-2007-0604

Hyperlink:http://www.vupen.com/english/advisories/2007/0604

External Source: OSVDB

Name: 33287

Hyperlink:http://osvdb.org/33287

External Source: OSVDB

Name: 33286

Hyperlink:http://osvdb.org/33286

External Source: OSVDB

Name: 33283

Hyperlink:http://osvdb.org/33283

External Source: OSVDB

Name: 33277

Hyperlink:http://osvdb.org/33277