CVE-2007-3416: Web-App.org Webapp

Medium severity, CVSS 5.0. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2) profiles, (3) IP bans, and (4) forums in (a) web-app.org WebAPP 0.8 through 0.9.9.6; and (b) web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators.

Affected products

• Web-App.org Webapp: up to and including 0.9.9.6
• Web App.net Webapp: version 0.9.9.3.3 only; version 0.9.9.3.4 only; version 2007 only

Published 2007-06-26. Last modified 2026-06-16.