CVE-2002-2129 Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echo...
MediumCVSS 4.3
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| w-agora | = 4.1.5 | No fix listed |
References
- 20021220 Re: XSS and PHP include bug in W-Agora mailing-list
- 20021219 XSS and PHP include bug in W-Agora mailing-list
- 6464 exploit vdb-entry
- wagora-editform-xss(10920) vdb-entry