WebAPP before 0.9.9.5 does not check referrers in certain forms, which might facilitate remote cross-site request forgery (CSRF) attacks or have other unknown impact.

BID:22563 | URL:http://www.securityfocus.com/bid/22563 | CONFIRM:http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 | OSVDB:33285 | URL:http://osvdb.org/33285 | SECUNIA:24080 | URL:http://secunia.com/advisories/24080 | VUPEN:ADV-2007-0604 | URL:http://www.vupen.com/english/advisories/2007/0604