CVE-2007-3416
Severity CVSS v4.0:
Pending analysis
Type:
CWE-352
Cross-Site Request Forgery (CSRF)
Publication date:
26/06/2007
Last modified:
29/07/2017
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:* | 0.9.9.6 (including) | |
cpe:2.3:a:web_app.net:webapp:0.9.9.3.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:web_app.net:webapp:0.9.9.3.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:web_app.net:webapp:2007:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page