CVE-2007-1177

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-02 · updated 2026-06-16

Description

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting (XSS).

Affected products

Web-App.Org Webapp: 0.9.9, 0.9.9.1, 0.9.9.2, 0.9.9.2.1, 0.9.9.3, 0.9.9.3.1 (+2)

References

http://osvdb.org/33277
http://osvdb.org/33283
http://osvdb.org/33286
http://osvdb.org/33287
http://secunia.com/advisories/24080
http://www.securityfocus.com/bid/22563
http://www.vupen.com/english/advisories/2007/0604
http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
http://osvdb.org/33277
http://osvdb.org/33283
http://osvdb.org/33286
http://osvdb.org/33287

Get alerted when CVE-2007-1177 or the next vulnerability affects your stack