CVE-2017-6562

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=XSS attack...

CVE-2017-6562

The provided connected records include concrete details for CVE-2017-6562: XSS in Agora-Project 3.2.2. The vulnerability is triggered via index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS], indicating a reflected/DOM-based XSS in the file handling controller. Affected software: A...

CVE-2017-6559

The CVE-2017-6559 entry documents a cross-site scripting (XSS) flaw in Agora-Project 3.2.2. The vulnerable vector is index.php?disconnect=1&msgNotif[]=[XSS], where user-supplied data is reflected into the page without sufficient sanitization. The impact is indicated as low confidentiality and low...

CVE-2017-6560

CVE-2017-6560 describes a cross-site scripting vulnerability in Agora-Project 3.2.2. The issue is triggered via an XSS payload in index.php?ctrl=misc&action=[XSS]&editObjId=[XSS], allowing injection into the application. The provided sources confirm the affected software and the vulnerability cla...

CVE-2017-6559

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...

CVE-2017-6561

CVE-2017-6561 : The connected sources confirm a cross-site scripting (XSS) vulnerability in Agora-Project version 3.2.2, exploitable via an index.php?ctrl=object&action=[XSS] parameter. The reports do not provide remediation details or confirm exploitation status. No other concrete technical spec...

Agora-Project 3.2.2 Cross Site Scripting

Exploit Title: XSS Vulnerability on Agora-Project 3.2.2 Google Dork: no Date: 23-02-2017 Exploit Author: @runggareksya, @AdyWikradinata, @yokoacc Vendor Homepage: https://www.agora-project.net Software Link: https://www.agora-project.net/?ctrl=offline&action=download Software Link Mirror:...

Agora-Project 3.2.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS Vulnerability on Agora-Project 3.2.2 Google Dork: no Date: 23-02-2017 Exploit Author: @runggareksya, @AdyWikradinata, @yokoacc Vendor Homepage: https://www.agora-project.net Software Link:...

agora-project.net XSS vulnerability

Vulnerable URL: https://www.agora-project.net/demo/index.php?disconnect=1=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1142633 VIP website status:| No...

Agora Marketplace Cross Site Request Forgery

Ladies and gentlemen Boys and girls It come to our attention that a brave warrior for the people Ross William Ulbricht was unlawfully convicted by the corporation known as the American government. This mockery of justice has not gone unnoticed. In order to protect the next generation of darknet...

Web Servers W-Agora Remote File Inclusion (CVE-2002-1878)

A Remote File Inclusion vulnerability has been reported in W-Agora. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...

W-Agora 4.0 - create_forum.php bn_dir_default Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

W-Agora 4.1.6 a login.php loginuser Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL...

W-Agora 4.2 Site Parameter Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14597/info W-Agora is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by supplyin...

W-Agora 4.0 - add_user.php bn_dir_default Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

W-Agora 4.1.6 a redir_url.php key Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL...

W-Agora 4.2.1 profile.php showuser Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23055/info w-Agora is prone to multiple arbitrary file-upload vulnerabilities. An attacker can exploit these vulnerabilities to upload PHP script code and execute it in the context of the webserver process. w-Agora 4.2.1 ...

W-Agora 4.2 BBCode Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17751/info W-Agora is prone to a script-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated content. W-Agora can...

Agora-Project 2.12.11 Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: agora-project2.12.1112-2011 Remote Shell Upload Google Dork: n0 N0obs Date: 10/06/2012 Exploit Author: Misa3l Vendor Homepage: http://sourceforge.net/projects/agora-project/ Software Link:...