Published: 31/12/2002 Updated: 05/09/2008

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote malicious users to execute arbitrary PHP code via the inc_dir parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
w-agora w-agora 4.1.2
w-agora w-agora 4.1.3
w-agora w-agora 4.1.1

source: wwwsecurityfocuscom/bid/4977/info W-Agora is prone to an issue which may allow an attacker to include arbitrary files located on a remote server In particular, the 'inc_dir' variable found in a number of the W-Agora scripts defines the path to the configuration file It is possible, under some configurations, for an attacker to s ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html http://www.ifrance.com/kitetoua/tuto/W-Agora.txt http://www.w-agora.net/current/view.php?site=support&bn=support_dl&key=1023878911&first=1023878911&last=957369563 http://www.securityfocus.com/bid/4977 http://www.iss.net/security_center/static/9317.php https://nvd.nist.gov https://www.exploit-db.com/exploits/21529/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1878

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect