Improper access control

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...

CVE-2007-0607

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...

CVE-2007-0607

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...

CVE-2007-0607

CVE-2007-0607 concerns w-agora 4.2.1 where enabling PHP register_globals allows disclosure of the contents of globals.inc by direct requests to the web document root, leaking server paths. The vulnerability stems from insufficient access control around globals.inc, enabling information disclosure...

W-Agora 4.2.1 - profile.php?showuser Cross-Site Scripting

W-Agora 4.2.1 - profile.php?showuser Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize...

W-Agora 4.2.1 - 'search.php?search_user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/23055/info w-Agora is prone to multiple arbitrary file-upload vulnerabilities. An attacker can exploit these vulnerabilities to upload PHP script code and execute it in the context of the...

W-Agora 4.2.1 - search.php?search_user Cross-Site Scripting

W-Agora 4.2.1 - search.php?searchuser Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitiz...

W-Agora 4.2.1 - change_password.php?userid Cross-Site Scripting

W-Agora 4.2.1 - changepassword.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently...

W-Agora 4.2.1 - 'change_password.php?userid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

W-Agora 4.2.1 - 'profile.php?showuser' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/23055/info w-Agora is prone to multiple arbitrary file-upload vulnerabilities. An attacker can exploit these vulnerabilities to upload PHP script code and execute it in the context of the webserver process. w-Agora 4.2.1 is vulnerable. ?php / Title...

w-agora version 4.2.1 Information Disclosure Vulnerability

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...

Vulnerabilities в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...

Update Protection against W-Agora 'inc_dir' Parameter Remote File Inclusion Vulnerabilities

W-Agora is an open source web publishing and forum software. It allows web administrators and their visitors to store and display messages, files, share discussions and other information on the web site. W-Agora is prone to multiple remote file inclusion vulnerabilities. An attacker can exploit...

Agora 1.4 RC1 (MysqlfinderAdmin.php) Remote File Include Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File...

Echo Security Advisory 2006.59

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...

Agora 1.4 RC1 (MysqlfinderAdmin.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Agora 1.4 RC1 MysqlfinderAdmin.php Remote File Include Vulnerability ====================================================================== \ /\ \ / | \ \ | / \ // / |...

Agora 1.4 RC1 - MysqlfinderAdmin.php Remote File Inclusion

Agora 1.4 RC1 - MysqlfinderAdmin.php Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1...

[ECHO_ADV_59_2006]Agora 1.4 RC1 "$_SESSION[PATH_COMPOSANT]" Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------------- Author : Dedi...