6.5
CVE-2007-3418
- EPSS 1.1%
- Veröffentlicht 26.06.2007 23:30:00
- Zuletzt bearbeitet 16.06.2026 22:41:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authenticated users to impersonate other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Web-app.Org ≫ Webapp Version <= 0.9.9.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.1% | 0.612 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458
http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip
http://osvdb.org/45399