CSRF in Web App.net Webapp
CVE-2007-3416
Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (44.3th percentile) — read the EPSS interpretation.
Affected products
- Web_app.net Webapp — versions 0.9.9.3.3, 0.9.9.3.4, 2007
- Web-app.org Webapp
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_VIM)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM)