Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

w-agora w-agora 4.1.6a vulnerabilities and exploits

(subscribe to this query)
755
VMScore
CVE-2004-1562
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote malicious users to execute arbitrary SQL commands via the key parameter.
W-agora W-agora 4.1.6a
445
VMScore
CVE-2004-1563
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote malicious users to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.
W-agora W-agora 4.1.6a
505
VMScore
CVE-2004-1564
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote malicious users to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
W-agora W-agora 4.1.6a
445
VMScore
CVE-2004-1565
list.php in w-Agora 4.1.6a allows remote malicious users to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
W-agora W-agora 4.1.6a
755
VMScore
CVE-2010-4867
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.
W-agora W-agora 4.0.3W-agora W-agora 4.1.0W-agora W-agora 4.1.7W-agora W-agoraW-agora W-agora 4.2.0W-agora W-agora 4.1.1W-agora W-agora 4.1.2W-agora W-agora 4.1.3W-agora W-agora 4.0.2W-agora W-agora 4.0.2aW-agora W-agora 4.1.6W-agora W-agora 4.1.6aW-agora W-agora 4.0.0W-agora W-agora 4.0.1W-agora W-agora 4.1.4W-agora W-agora 4.1.5
435
VMScore
CVE-2010-4868
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the bn parameter.
W-agora W-agora 4.0.3W-agora W-agora 4.1.0W-agora W-agora 4.1.6aW-agora W-agora 4.1.7W-agora W-agoraW-agora W-agora 4.2.0W-agora W-agora 4.1.1W-agora W-agora 4.1.2W-agora W-agora 4.0.2W-agora W-agora 4.0.2aW-agora W-agora 4.1.5W-agora W-agora 4.1.6W-agora W-agora 4.0.0W-agora W-agora 4.0.1W-agora W-agora 4.1.3W-agora W-agora 4.1.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook