CVE-2007-3418

N/A Unknown

Published: June 26, 2007 Modified: April 23, 2026

Description

The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authenticated users to impersonate other users.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/45399

Source: cve@mitre.org

http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458

Source: cve@mitre.org

http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip

Source: cve@mitre.org

Patch

http://osvdb.org/45399

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.web-app.org/downloads/WebAPPv0.9.9.7.zip

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

6 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.7%

72th percentile

Exploitation Status

Not in CISA KEV

Affected Vendors

web-app.org