CVE-2004-1562

The connected Nessus/NV documents confirm CVE-2004-1562 affects w-Agora 4.1.6a; vulnerability is a SQL injection in redir_url.php, exploitable via the key parameter to execute arbitrary SQL in the remote database. The related NASL entry also notes additional input validation flaws (XSS and HTTP r...