← Back

Agora.cgi

agora.cgi

Vendor: Steve Kneizys • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2002-0215
1Steve Kneizys
1Agora.cgi
Apr 16, 2026
May 16, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
CVE-2001-1199
1Steve Kneizys
1Agora.cgi
Apr 16, 2026
Dec 17, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.