CVE-2007-3416

Published Jun 26, 2007

Last updated 7 years ago

Overview

Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-352

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "148D57A7-D6B9-41A5-8B65-DCE7072E1C31",
            "versionEndIncluding": "0.9.9.6"
          },
          {
            "criteria": "cpe:2.3:a:web_app.net:webapp:0.9.9.3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B7FEF150-67B7-4611-9561-F9E93373AA0C"
          },
          {
            "criteria": "cpe:2.3:a:web_app.net:webapp:0.9.9.3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3856F3E6-495D-4D6C-92E3-FFB38637668C"
          },
          {
            "criteria": "cpe:2.3:a:web_app.net:webapp:2007:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "53BABD38-620E-43F7-8BD4-926F02F0F256"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References