Vulnerability in Steve Kneizys Agora.cgi

CVE-2002-0215

Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.

EPSS: 0.075 (93.8th percentile) — read the EPSS interpretation.

Affected products

Steve_kneizys Agora.cgi — versions 3.2, 3.2a, 3.2b
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)