CVE-2017-6562

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=XSS attack...

CVE-2017-6559

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...

CVE-2017-6560

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=XSS&editObjId=XSS attack...

CVE-2017-6561

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=XSS attack...

Cross site scripting

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...

Cross site scripting

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=XSS attack...

CVE-2017-6562

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=XSS attack...

CVE-2017-6560

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=XSS&editObjId=XSS attack...

CVE-2017-6561

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=XSS attack...

CVE-2017-6562

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=XSS attack...

CVE-2017-6559

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif=XSS attack...

CVE-2017-6560

CVE-2017-6560 describes a cross-site scripting vulnerability in Agora-Project 3.2.2. The issue is triggered via an XSS payload in index.php?ctrl=misc&action=[XSS]&editObjId=[XSS], allowing injection into the application. The provided sources confirm the affected software and the vulnerability cla...

CVE-2017-6559

The CVE-2017-6559 entry documents a cross-site scripting (XSS) flaw in Agora-Project 3.2.2. The vulnerable vector is index.php?disconnect=1&msgNotif[]=[XSS], where user-supplied data is reflected into the page without sufficient sanitization. The impact is indicated as low confidentiality and low...

CVE-2017-6562

The provided connected records include concrete details for CVE-2017-6562: XSS in Agora-Project 3.2.2. The vulnerability is triggered via index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS], indicating a reflected/DOM-based XSS in the file handling controller. Affected software: A...

CVE-2017-6561

CVE-2017-6561 : The connected sources confirm a cross-site scripting (XSS) vulnerability in Agora-Project version 3.2.2, exploitable via an index.php?ctrl=object&action=[XSS] parameter. The reports do not provide remediation details or confirm exploitation status. No other concrete technical spec...

Agora-Project 3.2.2 Cross Site Scripting

Exploit Title: XSS Vulnerability on Agora-Project 3.2.2 Google Dork: no Date: 23-02-2017 Exploit Author: @runggareksya, @AdyWikradinata, @yokoacc Vendor Homepage: https://www.agora-project.net Software Link: https://www.agora-project.net/?ctrl=offline&action=download Software Link Mirror:...

Agora-Project 3.2.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS Vulnerability on Agora-Project 3.2.2 Google Dork: no Date: 23-02-2017 Exploit Author: @runggareksya, @AdyWikradinata, @yokoacc Vendor Homepage: https://www.agora-project.net Software Link:...

agora-project.net XSS vulnerability

Vulnerable URL: https://www.agora-project.net/demo/index.php?disconnect=1=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1142633 VIP website status:| No...

Agora Marketplace Cross Site Request Forgery

Ladies and gentlemen Boys and girls It come to our attention that a brave warrior for the people Ross William Ulbricht was unlawfully convicted by the corporation known as the American government. This mockery of justice has not gone unnoticed. In order to protect the next generation of darknet...

Web Servers W-Agora Remote File Inclusion (CVE-2002-1878)

A Remote File Inclusion vulnerability has been reported in W-Agora. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...