CVE-2007-1176

概要

参考情報

• osvdb.org/33276
• osvdb.org/33288
• osvdb.org/33289
• osvdb.org/33290
• secunia.com/advisories/24080
• securityfocus.com/bid/22563
• vupen.com/english/advisories/2007/0604
• web-app.org/cgi-bin/index.cgi · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/32498
• exchange.xforce.ibmcloud.com/vulnerabilities/32499
• exchange.xforce.ibmcloud.com/vulnerabilities/32526

webapp のその他の脆弱性

• CVE-2007-3424高 7.5The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory nam…
• CVE-2007-3423高 7.5cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .da…
• CVE-2007-3422高 7.5The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that contain (1) non-pri…
• CVE-2007-3421高 7.5The (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6) gallery view, (7) gallery comment, and (8) gall…
• CVE-2007-3420高 7.5The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not c…