Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

w-agora w-agora 4.1.6 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2010-4867
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.
W-agora W-agora 4.0.3W-agora W-agora 4.1.0W-agora W-agora 4.1.7W-agora W-agoraW-agora W-agora 4.2.0W-agora W-agora 4.1.1W-agora W-agora 4.1.2W-agora W-agora 4.1.3W-agora W-agora 4.0.2W-agora W-agora 4.0.2aW-agora W-agora 4.1.6W-agora W-agora 4.1.6aW-agora W-agora 4.0.0W-agora W-agora 4.0.1W-agora W-agora 4.1.4W-agora W-agora 4.1.5
4.3
CVSSv2
CVE-2010-4868
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the bn parameter.
W-agora W-agora 4.0.3W-agora W-agora 4.1.0W-agora W-agora 4.1.6aW-agora W-agora 4.1.7W-agora W-agoraW-agora W-agora 4.2.0W-agora W-agora 4.1.1W-agora W-agora 4.1.2W-agora W-agora 4.0.2W-agora W-agora 4.0.2aW-agora W-agora 4.1.5W-agora W-agora 4.1.6W-agora W-agora 4.0.0W-agora W-agora 4.0.1W-agora W-agora 4.1.3W-agora W-agora 4.1.4
4.3
CVSSv2
CVE-2002-2129
Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote malicious users to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.
W-agora W-agora 4.1.5
7.5
CVSSv2
CVE-2004-1562
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote malicious users to execute arbitrary SQL commands via the key parameter.
W-agora W-agora 4.1.6a
4.3
CVSSv2
CVE-2004-1563
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote malicious users to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.
W-agora W-agora 4.1.6a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook