VYPR
Unrated severityNVD Advisory· Published Jun 26, 2007· Updated Apr 23, 2026

CVE-2007-3416

CVE-2007-3416

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators.

Affected products

4
  • cpe:2.3:a:web_app.net:webapp:0.9.9.3.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:web_app.net:webapp:0.9.9.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:web_app.net:webapp:0.9.9.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:web_app.net:webapp:2007:*:*:*:*:*:*:*
    • cpe:2.3:a:web-app.org:webapp:*:*:*:*:*:*:*:*range: <=0.9.9.6

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.