high7.5Public exploit code
CVE-2001-1199
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Agora.CGI 3.x/4.0 - Debug Mode Cross-Site Scripting2001-12-17 · webapps · cgi · Verified
Impact
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steve Kneizys | Agora.Cgi | Versions 3.2, 3.2a, 3.2b, 3.2c, 3.2d, 3.2e |
References
- NVD record
- CVE.org record
- http://www.agoracgi.com/security.html
- http://www.iss.net/security_center/static/7708.php
- http://www.osvdb.org/698
- http://www.securityfocus.com/archive/1/246044
- http://www.securityfocus.com/bid/3702
- http://www.agoracgi.com/security.html
- http://www.iss.net/security_center/static/7708.php
- http://www.osvdb.org/698
- http://www.securityfocus.com/archive/1/246044
- http://www.securityfocus.com/bid/3702