CVE-2007-3419 | BDVDB-2026-24919 Detail

Description#

The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip
http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
http://osvdb.org/45400

Exploit#

No public exploit known

History#

Version 12007-06-26Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.