CVE-2007-1828
Published Apr 3, 2007
Last updated 14 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the QUERY_STRING corresponding to drop downs or (2) various forms.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA8C727E-412A-4044-8FE9-63C4FD8D4779"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87B45A79-F173-44D6-8737-22DDE3877AE7"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A343A7FD-E5BA-4C84-913B-2B56AFA555FD"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E368E915-8382-4BF1-9399-1F58F35CE8D4"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9216F8B4-8B90-4DF0-9135-CFBBBE8E199E"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E7890A9-68D0-4882-9BF0-EE90C32DA554"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "124D5CC6-651A-4C59-975E-D23500DE0EA9"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA59FFEE-6845-4CE3-A7EA-E974165F0688"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9324314-F9CB-4A02-B550-EB8A478BDDB8"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE858A8E-EF70-45CB-8422-2F41B2B6233C"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC102B4E-32FB-4424-8BF9-1E69A95961D4"
},
{
"criteria": "cpe:2.3:a:web-app.org:webapp:0.9.9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B1DDBEC-988E-44EB-B035-154C61B04DBC"
}
],
"operator": "OR"
}
]
}
]