CVE-2006-7189

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-03 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer.

Affected products

Web-App.Net Webapp: 0.9.9.6

References

http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1
http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1
http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1
http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1

Get alerted when CVE-2006-7189 or the next vulnerability affects your stack