Vulnerabilities > WEB APP ORG > Webapp > 0.9.9.3.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-04-03 | CVE-2007-1828 | Cross-Site Scripting vulnerability in WebAPP Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the QUERY_STRING corresponding to drop downs or (2) various forms. network web-app-org | 3.5 |
| 2007-04-03 | CVE-2007-1827 | Remote Security vulnerability in WebAPP Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to corrupt data files, gain access to private files, and execute arbitrary code via "certain characters." network web-app-org | 6.0 |