First published: Wed Feb 28 2007(Updated: )
WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
WebAPP | =0.9.9.3 | |
WebAPP | =0.9.9.3.2 | |
WebAPP | =0.9.9.2.1 | |
WebAPP | =0.9.9.2 | |
WebAPP | =0.9.9.1 | |
WebAPP | =0.9.9 | |
WebAPP | =0.9.9.3.1 | |
WebAPP | =0.9.9.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-1181 is a vulnerability in WebAPP before version 0.9.9.5 that exposes unused information and the username through Edit Profile forms.
CVE-2007-1181 affects WebAPP versions 0.9.9, 0.9.9.1, 0.9.9.2, 0.9.9.2.1, 0.9.9.3, 0.9.9.3.1, 0.9.9.3.2, and 0.9.9.4.
CVE-2007-1181 may lead to exposure of sensitive information without a clear understanding of the impact or specific attack vectors.
To mitigate CVE-2007-1181, upgrade to WebAPP version 0.9.9.5 or later, which addresses this vulnerability.
Yes, updating to WebAPP version 0.9.9.5 or later will resolve the issues associated with CVE-2007-1181.