📦

webapp

Vendor: web-app.org

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 3 Code Available
Total RCEs 3 Remote Access
Total CVEs 72 Total Indexed
Avg. EPSS 1.53% Exploit Prob.
Latest CVE CVE-2019-9106 May 31

Security Vulnerability Index

Page 5 / 8
5.0 CVSS
CVE-2007-1185

The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors.

EPSS: 1.08%
5.0 CVSS
CVE-2007-1184

The default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data.

EPSS: 1.05%
4.3 CVSS
CVE-2007-1175

Cross-site scripting (XSS) vulnerability in an admin feature in WebAPP before 20070209 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 1.03%
5.5 CVSS
CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches.

EPSS: 1.14%
5.0 CVSS
CVE-2007-1186

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact.

EPSS: 1.08%
4.3 CVSS
CVE-2006-6687

Cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 0.90%
7.5 CVSS
CVE-2006-6688

Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET) allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 1.32%
4.3 CVSS
CVE-2006-1427
Exploit Found

Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi.

EPSS: 2.47%
7.5 CVSS
CVE-2005-1628
RCE Exploit Found

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.

EPSS: 10.64%
10.0 CVSS
CVE-2005-0927

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences.

EPSS: 1.65%