CVE-2007-1181 | Vulnerability Database | Aqua Security

WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors.

Name	Vendor	Start Version	End Version
Webapp	Web-app.org	0.9.9 (including)	0.9.9 (including)
Webapp	Web-app.org	0.9.9.1 (including)	0.9.9.1 (including)
Webapp	Web-app.org	0.9.9.2 (including)	0.9.9.2 (including)
Webapp	Web-app.org	0.9.9.2.1 (including)	0.9.9.2.1 (including)
Webapp	Web-app.org	0.9.9.3 (including)	0.9.9.3 (including)
Webapp	Web-app.org	0.9.9.3.1 (including)	0.9.9.3.1 (including)
Webapp	Web-app.org	0.9.9.3.2 (including)	0.9.9.3.2 (including)
Webapp	Web-app.org	0.9.9.4 (including)	0.9.9.4 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-1181
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html