CVE Feed

    Dashboard / CVE / CVE-2007-3242

    CVE-2007-3242

    The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows remote authenticated users to execute arbitrary commands via shell metacharacters in the titles of items in a personal menu.

    Published:Jun 15, 2007
    Last Modified:Apr 23, 2026
    EPS:Jun 15, 2007
    EPSS Score:0.01224
    CVSS Score:7.5

    Affected Products

    Vendor
    Web-app.net
    Product
    Webapp
    Vendor
    Web-app.org
    Product
    Webapp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2006-7187 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib/search.pl in…
    CVE-2006-7188 (CVSS 5) — The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attacker…
    CVE-2006-7186 (CVSS 5) — cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and oth…
    CVE-2006-7189 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allow…
    CVE-2007-1829 (CVSS 7.5) — Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described a…
    CVE-2006-7190 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 a…
    CVE-2006-6687 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network …
    CVE-2006-6688 (CVSS 7.5) — Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET) allows remote …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High