Vulnerability in Web-App.net Webapp
CVE-2006-7190
Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc.
EPSS: 0.008 (54.3th percentile) — read the EPSS interpretation.
Affected products
- Web-app.net Webapp — versions 0.9.9.6
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM)