Unscored severity · published Jun 15, 2007
CVE-2007-3242
The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the titles of items in a personal menu.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webapp · Web-app.net
0.9.9.3.3; 0.9.9.3.4; 0.9.9.4; 0.9.9.5; 0.9.9.6; 0.9.9.7; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3242
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3242
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-June/001686.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/471213/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/471638/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/24453
www.web-app.net
http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=security&id=3
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34845
More from Webapp
–
CVE-2007-3416
Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through…
–
CVE-2006-7187
Cross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to inject…
–
CVE-2006-7188
The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related…
–
CVE-2006-7190
Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via…
–
CVE-2007-1829
Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "[having] other [security] issues too, not as bad as letting users…