| Package | Affected versions | Patched versions |
|---|---|---|
| webapp | ≤ 0.9.9.6 |
The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free