Security Advisory

CVE-2007-3419

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-06-26 23:00:00

Last updated 2024-08-07 14:14:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.dat, (6) states.dat, and (7) ages.dat files before saving profile settings of members, which has unknown impact and remote attack vectors.

← Browse all CVEs View on cve.org ↗