CVE-2007-1177

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting (XSS).

• http://osvdb.org/33277
• http://osvdb.org/33283
• http://osvdb.org/33286
• http://osvdb.org/33287
• http://secunia.com/advisories/24080Patch, Vendor Advisory
• http://www.securityfocus.com/bid/22563Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0604
• http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
• http://osvdb.org/33277
• http://osvdb.org/33283
• http://osvdb.org/33286
• http://osvdb.org/33287
• http://secunia.com/advisories/24080Patch, Vendor Advisory
• http://www.securityfocus.com/bid/22563Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0604
• http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250

Published

Mar 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1171SQL injection vulnerability in includes/nsbypass.php in Nuke…
• CVE-2007-1172SQL injection vulnerability in nukesentinel.php in NukeSenti…
• CVE-2007-1173Multiple buffer overflows in the CentennialIPTransferServer …
• CVE-2007-1174Multiple cross-site scripting (XSS) vulnerabilities in WebAP…
• CVE-2007-1175Cross-site scripting (XSS) vulnerability in an admin feature…
• CVE-2007-1176Multiple cross-site scripting (XSS) vulnerabilities in WebAP…
• CVE-2007-1178WebAPP before 0.9.9.5 does not check access in certain conte…
• CVE-2007-1179WebAPP before 0.9.9.5 does not properly manage e-mail addres…
• CVE-2007-1180WebAPP before 0.9.9.5 does not check referrers in certain fo…
• CVE-2007-1181WebAPP before 0.9.9.5 passes (1) Unused Informations and (2)…
• CVE-2007-1182WebAPP before 0.9.9.5 allows remote Guest users to edit a Gu…
• CVE-2007-1183WebAPP before 0.9.9.5 allows remote authenticated users to s…