Vulnerability in Steve Kneizys Agora.cgi

CVE-2001-1199

Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.

EPSS: 0.087 (94.6th percentile) — read the EPSS interpretation.

Affected products

Steve_kneizys Agora.cgi — versions 3.2, 3.2a, 3.2b
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, URL Repurposed)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)